db79dc42c6ddb4a34d99c60e452c6864e777743725abb5bea6913e2ce8a790e8

General

Target
VMProtect Ultimate v3.0.9 Build 695 Released.7z
Size 58.0MB
Sample260916-pcnb9axyew
SHA256 db79dc42c6ddb4a34d99c60e452c6864e777743725abb5bea6913e2ce8a790e8
MD5 48fbff1454bf8cd8a652b725dc9d7070
SHA1 9823fd07e10e2bb37509bd08370f465ab26d7fe0
SHA512 10ea5f35ca60486903c2376ac523fffdc67d40862a112ff0520f787be1f9cb016fea483dde768b52cffaf69d256a691474da75919ac451447e35774be79e5ed0
SSDEEP 1572864:tEMMINT228ghPhFt9OKOe8cPo1T45N7GWswV:tEZoF8gh7t91V8tgKWhV
TLSH
T104D733DC625C34A6F8633127ADCF86B78A7089EEC11520668EF1923D9D058DB853E1DE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  VMProtect Ultimate v3.0.9 Build 695 Released.7z
- Size 58.0MB
- SHA256 db79dc42c6ddb4a34d99c60e452c6864e777743725abb5bea6913e2ce8a790e8
- MD5 48fbff1454bf8cd8a652b725dc9d7070
- SHA1 9823fd07e10e2bb37509bd08370f465ab26d7fe0
- SHA512 10ea5f35ca60486903c2376ac523fffdc67d40862a112ff0520f787be1f9cb016fea483dde768b52cffaf69d256a691474da75919ac451447e35774be79e5ed0
- SSDEEP 1572864:tEMMINT228ghPhFt9OKOe8cPo1T45N7GWswV:tEZoF8gh7t91V8tgKWhV
- TLSH
  T104D733DC625C34A6F8633127ADCF86B78A7089EEC11520668EF1923D9D058DB853E1DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer ransomware upx
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  password.txt
- Size 43B
- SHA256 5d8c416263e6cfc2e8bfeacc7b2ab08cfabf90439e9cdeede5f50a989f2ca5bc
- MD5 533d8140960d48027d9d051fc1785e3d
- SHA1 4aedb93d0f178de14f2aaf0679b01092b8adf96a
- SHA512 6e39a23ed303f6b14c15da74d183f21678a9365bdda0fb61a054141726a8f3a0f971ee4b6b37975c61e40c68236261c4fa362f88975816097b32ec73d3fd3a7b
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  vmprotect_88996417.exe
- Size 58.1MB
- SHA256 c57742a3fcfc0840bff996958a0c1f21a46b1dac902b53d6c74e035094e8f364
- MD5 6eb0c6ea6895b7ac6d18d60daa674beb
- SHA1 7bd51ad43071bdd9ff19b7864f90211f8497df73
- SHA512 bdbf88fa0dea7839356c56645fc981eaad0d7c6c30e56dacff509170061fa70fc292a978097465e3b8d5a2b6a1df1bcbdfd36ef70e54716b43d3c11ac9b01402
- SSDEEP 1572864:nNH3FNc6cyW7tJ8DxZNfMpHkFaew2vRQQVAY:nNX7SyW7EDxX0pJs6Q2Y
- TLSH
  T191D7339CA3992076F86331369DCF85A69E7089FD81D120168EF1C23D9D358D7893E2DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Executes dropped EXE
- Loads dropped DLL
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

UPX packed file

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6