Overview

overview

10

Static

static

8

53e982e656...c0.exe

windows7-x64

10

53e982e656...c0.exe

windows10-2004-x64

10

Resubmissions

29/11/2022, 17:56

221129-wjef9aeh8110

07/07/2022, 12:21

220707-pjry1sabg210

17/11/2021, 18:12

211117-wtaaaaaebn

21/08/2021, 14:02

210821-e56bctg12a8

Sharing

Copy URL Twitter E-mail

General

  • Target
    53e982e656f91d263494170d71228e6d98c026a23293fbb70176531794d149c0
  • Size 6.2MB
  • Sample221129-wjef9aeh81
  • SHA256 53e982e656f91d263494170d71228e6d98c026a23293fbb70176531794d149c0
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
colibriloadervmprotect

Malware Config

Extracted

Family

  • colibri

C2

  • http://80.92.205.102/gate.php

rc4.plain

Targets

    • Target
      53e982e656f91d263494170d71228e6d98c026a23293fbb70176531794d149c0
    • Size 6.2MB
    • SHA256 53e982e656f91d263494170d71228e6d98c026a23293fbb70176531794d149c0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    colibriloadervmprotect

    • Colibri Loader

      A loader sold as MaaS first seen in August 2021.

      loadercolibri

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks