Overview

overview

7

Static

static

7

39b229b209...53.exe

windows7-x64

7

39b229b209...53.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39b229b2098d95e8fa28139f5e2517a0150b5ccc6e66543e1e79e6fbb3efe453

  • Size

    14.4MB

  • Sample

    240701-qtpr3sxgmp

  • MD5

    36c5b406543fc52d5ee8736ed82000b0

  • SHA1

    c598a2683493a8c5161dba2901cf2e01de6bb56a

  • SHA256

    39b229b2098d95e8fa28139f5e2517a0150b5ccc6e66543e1e79e6fbb3efe453

  • SHA512

    7f93e1ba840d6521bbad22951c409c67db916b3362d75f5937b756434bddcf3dc910ac0354385fa3bc753710fa99a4822affa2fc1e087cdf1c9a948978574a23

  • SSDEEP

    393216:0TPL5gUBKn5vtQxy6eOuhi2+k66/F8up3:0TPL5g5vtQxy6etimgup

Score
7/10
upxvmprotect

Malware Config

Targets

    • Target

      39b229b2098d95e8fa28139f5e2517a0150b5ccc6e66543e1e79e6fbb3efe453

    • Size

      14.4MB

    • MD5

      36c5b406543fc52d5ee8736ed82000b0

    • SHA1

      c598a2683493a8c5161dba2901cf2e01de6bb56a

    • SHA256

      39b229b2098d95e8fa28139f5e2517a0150b5ccc6e66543e1e79e6fbb3efe453

    • SHA512

      7f93e1ba840d6521bbad22951c409c67db916b3362d75f5937b756434bddcf3dc910ac0354385fa3bc753710fa99a4822affa2fc1e087cdf1c9a948978574a23

    • SSDEEP

      393216:0TPL5gUBKn5vtQxy6eOuhi2+k66/F8up3:0TPL5g5vtQxy6etimgup

    Score
    7/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks