General

  • Target

    28f4bb6859fea0b95bf8798b221e5d6be3e2d43af8dba9da01f4786b820c68e1

  • Size

    3.6MB

  • MD5

    028d8be40d6605f1410ba29fa0dcf7e9

  • SHA1

    20bf2c5fdf11d35966c916dd4127ddac74b4f0cf

  • SHA256

    28f4bb6859fea0b95bf8798b221e5d6be3e2d43af8dba9da01f4786b820c68e1

  • SHA512

    ff0c6742a1e4f45f04c4ac7a4b283cf1fa5a7b8373f5105e2009bfb556604f07f1ae4e168a60feaf2e3a861080e36ccde0dd1041dd074117a583e57383db9bcc

  • SSDEEP

    98304:nX+AdkDedxGy57FGd8uA9nPEdEqJhmzRd5z1Jt0:XZksGyxFtjPE6qJhMfJm

Score
8/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

Files

  • 28f4bb6859fea0b95bf8798b221e5d6be3e2d43af8dba9da01f4786b820c68e1
    .zip
  • //AT.exe
    .exe windows x86

    f96f2140541061cb1e03b538b3ab174f


    Headers

    Imports

    Sections

  • //CG.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • //zlib.dll
    .dll windows x86

    cc434289b6eaac75c3339a4263587ca1


    Headers

    Imports

    Exports

    Sections

  • //˵.txt