SecuriteInfo[.]com[.]Variant[.]Ursu[.]904612[.]13520[.]18402 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Variant.Ursu.904612.13520.18402
Size 747KB
Sample201109-vsg2flwrve
SHA256 baa64a07d699b89e8715fe38010305c8b42fcb15384550d7cb56f44a71894490
MD5 08cc18a1d6e266a12533519a2922f163
SHA1 502e178b49457ab793190f6dad7e9703a195cae6
SHA512 e4bf21d3ecff0ba01b68f51c90d9081976c475cc837d399f795e345d6db13ba9eb42e7c08eab64526580452ae2137ad160a2b809a5f6059f3b8e519024400f9f
MD5 SHA1 SHA512

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

resource	yara_rule
sample	vmprotect

File Explorer

SecuriteInfo.com.Variant.Ursu.904612.13520.18402

.exe 747KB

SecuriteInfo.com.Variant.Ursu.904612.13520.18402

SHA256 baa64a07d699b89e8715fe38010305c8b42fcb15384550d7cb56f44a71894490
MD5 08cc18a1d6e266a12533519a2922f163
SHA1 502e178b49457ab793190f6dad7e9703a195cae6
SHA512 e4bf21d3ecff0ba01b68f51c90d9081976c475cc837d399f795e345d6db13ba9eb42e7c08eab64526580452ae2137ad160a2b809a5f6059f3b8e519024400f9f
MD5 SHA1 SHA512

windows x86

VMProtect packed file

Detects executables packed with VMProtect commercial packer.

vmprotect