General

  • Target

    3356559202bc774b2201346dcbfea6dadfd8b256288a8e0d7a8f7da120030fcb

  • Size

    12.8MB

  • MD5

    239bf3b156c534745d584ad8cf02e5b0

  • SHA1

    afa276ce42be4be7195e151370d3bf338acb437f

  • SHA256

    3356559202bc774b2201346dcbfea6dadfd8b256288a8e0d7a8f7da120030fcb

  • SHA512

    c9d5c44e7fbc8771547edb2d5a00495a06731768d4d463937de7699c8beeff4b4a39552ef52d741658eda230fc867bb882a0dc0221149dccbbaad294e193b58e

  • SSDEEP

    196608:ai7OV7fPVUJqpZ6rspx/fuV9VPHNCMkn+meelg3rtyAnfAcH6GSeF9X0yxJ22gWy:D7OVgqpIrSf49bCMkn+PrtymBSeF9kyS

Score
8/10

Malware Config

Signatures

  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

Files

  • 3356559202bc774b2201346dcbfea6dadfd8b256288a8e0d7a8f7da120030fcb
    .rar
  • GameHardware.exe
    .exe windows x86

    95fcdea6237ee6b61f2481f394057bbd


    Headers

    Imports

    Exports

    Sections

  • IP地址修改器.exe
    .exe windows x86

    f0bf84dc4f50c80dffd85e2831db09ce


    Headers

    Imports

    Sections

  • VMwarehardware.exe
    .exe windows x86

    7127463e4161bd2854914c62725bc419


    Headers

    Imports

    Exports

    Sections

  • hardware.exe
    .exe windows x86

    cbf35aa0e49c55fea42ace3691d707aa


    Headers

    Imports

    Exports

    Sections

  • 一键修改系统信息.exe
    .exe windows x86

    f8d955f54ea1e57274502422605587a9


    Headers

    Imports

    Sections

  • 分区序列号修改工具.exe
    .exe windows x86

    fddbb1ee1ec29758aea0be53f6f44564


    Headers

    Imports

    Sections

  • 网卡MAC地址修改工具.exe
    .exe windows x86

    c4a2a2e14187b37efacae15a2ac06bc3


    Headers

    Imports

    Sections

  • 说明.txt