Overview

overview

7

Static

static

7

0ce135e6c3...82.dll

windows7-x64

7

0ce135e6c3...82.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ce135e6c3f40394f8437bbff00af4c923d5da075b3cc964802a093e5d559b82

  • Size

    2.8MB

  • Sample

    240702-e2fzcswama

  • MD5

    2cbb361c11f88515b8e1f3450ee5ad93

  • SHA1

    ca03c1c71250f3e58644cb3bd6909577e26be68f

  • SHA256

    0ce135e6c3f40394f8437bbff00af4c923d5da075b3cc964802a093e5d559b82

  • SHA512

    7ef505e937b7e6b4e553a5341d2fb5ed57c69a0a145d7c26a1fc432fd34b5c6713c18cff4c1c910dcac1894294ceca47989ca765f4819645416ebdfe14c95951

  • SSDEEP

    49152:/CfdR6kk11e+PmC03OE045704dZRvkzLGw+Qime+2X7qrUx0Om8:/C1R7k1sspY0qRvkvuQqeo0

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      0ce135e6c3f40394f8437bbff00af4c923d5da075b3cc964802a093e5d559b82

    • Size

      2.8MB

    • MD5

      2cbb361c11f88515b8e1f3450ee5ad93

    • SHA1

      ca03c1c71250f3e58644cb3bd6909577e26be68f

    • SHA256

      0ce135e6c3f40394f8437bbff00af4c923d5da075b3cc964802a093e5d559b82

    • SHA512

      7ef505e937b7e6b4e553a5341d2fb5ed57c69a0a145d7c26a1fc432fd34b5c6713c18cff4c1c910dcac1894294ceca47989ca765f4819645416ebdfe14c95951

    • SSDEEP

      49152:/CfdR6kk11e+PmC03OE045704dZRvkzLGw+Qime+2X7qrUx0Om8:/C1R7k1sspY0qRvkvuQqeo0

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks