Overview

overview

7

Static

static

7

eea179ffad...f3.exe

windows7-x64

7

eea179ffad...f3.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eea179ffad93a246614987ff5fccf1b3367caba1b78a4f0413cbb19c449b71f3

  • Size

    8.5MB

  • Sample

    240628-eterbs1akb

  • MD5

    292966dcf7e1029de9b536cf62093af0

  • SHA1

    9a500339d7b6d56b95a785359e7342f20c0aa897

  • SHA256

    eea179ffad93a246614987ff5fccf1b3367caba1b78a4f0413cbb19c449b71f3

  • SHA512

    f5a3e9c04ce6ffa1f0644e801ba1037b9ce63e233ed6b96e8ffb839b9da13d1248ecf9eeea8c7b5a434c15e92809c4fbfc7f464884f4b7a1038f78b4e1006f96

  • SSDEEP

    196608:IXBJdONg9/7pZKkiS9ydtPKGPs9r7HabRT/X/RI9USpkCVtxXEZTplL7A+u1y:Ifl/1ZeS9yHrslGT/PR2USpRtxXEZTjS

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      eea179ffad93a246614987ff5fccf1b3367caba1b78a4f0413cbb19c449b71f3

    • Size

      8.5MB

    • MD5

      292966dcf7e1029de9b536cf62093af0

    • SHA1

      9a500339d7b6d56b95a785359e7342f20c0aa897

    • SHA256

      eea179ffad93a246614987ff5fccf1b3367caba1b78a4f0413cbb19c449b71f3

    • SHA512

      f5a3e9c04ce6ffa1f0644e801ba1037b9ce63e233ed6b96e8ffb839b9da13d1248ecf9eeea8c7b5a434c15e92809c4fbfc7f464884f4b7a1038f78b4e1006f96

    • SSDEEP

      196608:IXBJdONg9/7pZKkiS9ydtPKGPs9r7HabRT/X/RI9USpkCVtxXEZTplL7A+u1y:Ifl/1ZeS9yHrslGT/PR2USpRtxXEZTjS

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks