SecuriteInfo[.]com[.]Trojan[.]NtRootKit[.]18405[.]11776[.]1149 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Trojan.NtRootKit.18405.11776.1149
Size 872KB
Sample200707-xkfvb768cn
SHA256 8916a2ccfa61771ecb3ace5da83e029f1ba683f36016fafc50922c9a5615b625
MD5 24286c2c37d56443331f1bca960eb51d
SHA1 243f198205eeadf8abcab4b7626084fc53e712e1
SHA512 b07f89cbfaf2e24c6574c28c4f3d18eab67de09d4f3363b1c1fcb0037a15f5cb80f5193884ffd9c742682a332e24541707a7d68ef11c13bcae07687066bcf2f8
MD5 SHA1 SHA512

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

resource	yara_rule
sample	vmprotect

File Explorer

SecuriteInfo.com.Trojan.NtRootKit.18405.11776.1149

.exe 872KB

SecuriteInfo.com.Trojan.NtRootKit.18405.11776.1149

SHA256 8916a2ccfa61771ecb3ace5da83e029f1ba683f36016fafc50922c9a5615b625
MD5 24286c2c37d56443331f1bca960eb51d
SHA1 243f198205eeadf8abcab4b7626084fc53e712e1
SHA512 b07f89cbfaf2e24c6574c28c4f3d18eab67de09d4f3363b1c1fcb0037a15f5cb80f5193884ffd9c742682a332e24541707a7d68ef11c13bcae07687066bcf2f8
MD5 SHA1 SHA512

windows x86

VMProtect packed file

Detects executables packed with VMProtect commercial packer.

vmprotect