General

  • Target

    Archive_Pass_55555.rar

  • Size

    55.6MB

  • MD5

    0ad2912978402473b527d69691449ed3

  • SHA1

    8cd1cb51b75be1e363cbecba29799b07a4bc5e0c

  • SHA256

    2b081f21ae505c656f1b8dd917d96e920cf52caeea47b9989638fcf967a93a19

  • SHA512

    4d2aba780307c115bb6f9012375f972a811b367e31e5045e1d53771ce2c6890e0e5ed36c0f7ac0b5d894880117bcea90e08d1cd60f35ac6d7cb6a5e6077f5e14

  • SSDEEP

    1572864:V3LaRtc8ud9HsbVWr+6AeNV9mohVtLQfr8H7Q6o:1LaRtc82brH/r5hVte8HS

Score
8/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Files

  • Archive_Pass_55555.rar
    .rar
  • About/ActiveXInstallService.admx
  • About/AddRemovePrograms.admx
  • About/AppCompat.admx
  • About/AppXRuntime.admx
    .xml
  • About/AppxPackageManager.admx
  • About/AttachmentManager.admx
  • About/AuditSettings.admx
    .xml
  • About/AutoPlay.admx
  • About/Biometrics.admx
  • About/Bits.admx
  • About/CEIPEnable.admx
  • About/COM.admx
  • About/CipherSuiteOrder.admx
  • About/Conf.admx
  • About/ControlPanel.admx
  • About/ControlPanelDisplay.admx
  • About/Cpls.admx
  • About/CredSsp.admx
  • About/CredUI.admx
  • About/CredentialProviders.admx
  • About/CtrlAltDel.admx
  • About/DCOM.admx
  • About/DFS.admx
  • About/DWM.admx
  • About/Desktop.admx
  • About/DeviceCompat.admx
  • About/DeviceInstallation.admx
  • About/DeviceSetup.admx
  • About/DigitalLocker.admx
  • About/DiskDiagnostic.admx
  • About/DiskNVCache.admx
  • About/DiskQuota.admx
  • About/DistributedLinkTracking.admx
  • About/DnsClient.admx
  • About/EAIME.admx
  • About/EarlyLaunchAM.admx
  • About/EdgeUI.admx
  • About/EncryptFilesonMove.admx
  • About/ErrorReporting.admx
  • About/EventForwarding.admx
    .xml
  • About/EventLog.admx
  • About/EventViewer.admx
  • About/Explorer.admx
  • About/ExternalBoot.admx
    .xml
  • About/FileHistory.admx
  • About/FileRecovery.admx
  • About/FileRevocation.admx
  • About/FileServerVSSProvider.admx
  • About/FileSys.admx
    .xml
  • About/Globalization.admx
  • About/GroupPolicy-Server.admx
  • About/GroupPolicy.admx
  • About/GroupPolicyPreferences.admx
  • About/Help.admx
  • About/HelpAndSupport.admx
  • About/ICM.admx
  • About/IIS.admx
  • About/InkWatson.admx
  • About/Kerberos.admx
  • About/LanmanServer.admx
  • About/LeakDiagnostic.admx
  • About/LinkLayerTopologyDiscovery.admx
  • About/LocationProviderAdm.admx
  • About/Logon.admx
  • About/MMC.admx
  • About/MMCSnapIns2.admx
  • About/MMCSnapins.admx
  • About/MSDT.admx
  • About/MSI.admx
  • About/MediaCenter.admx
  • About/MobilePCMobilityCenter.admx
  • About/MobilePCPresentationSettings.admx
  • About/Msi-FileRecovery.admx
  • About/NAPXPQec.admx
  • About/NCSI.admx
  • About/Netlogon.admx
  • About/NetworkConnections.admx
  • About/NetworkIsolation.admx
  • About/NetworkProjection.admx
  • About/OfflineFiles.admx
  • About/P2P-pnrp.admx
  • About/ParentalControls.admx
  • About/PeerToPeerCaching.admx
  • About/PenTraining.admx
  • About/PerformanceDiagnostics.admx
  • About/PerformancePerftrack.admx
  • About/Power.admx
  • About/PowerShellExecutionPolicy.admx
  • About/PreviousVersions.admx
  • About/Printing.admx
  • About/Printing2.admx
  • About/Programs.admx
  • About/PswdSync.admx
  • About/QOS.admx
  • About/RPC.admx
  • About/RacWmiProv.admx
  • About/Radar.admx
  • About/ReAgent.admx
  • About/Reliability.admx
  • About/RemoteAssistance.admx
  • About/RemovableStorage.admx
  • About/Scripts.admx
  • About/Securitycenter.admx
  • About/Sensors.admx
  • About/ServerManager.admx
  • About/Servicing.admx
  • About/SettingSync.admx
  • About/Setup.admx
  • About/en-US/ActiveXInstallService.adml
    .xml
  • About/en-US/AddRemovePrograms.adml
    .xml
  • About/en-US/AppCompat.adml
    .xml
  • About/en-US/AppXRuntime.adml
    .xml
  • About/en-US/AppxPackageManager.adml
    .xml
  • About/en-US/AttachmentManager.adml
    .xml
  • About/en-US/AuditSettings.adml
    .xml
  • About/en-US/AutoPlay.adml
    .xml
  • About/en-US/Biometrics.adml
    .xml
  • About/en-US/Bits.adml
    .xml
  • About/en-US/CEIPEnable.adml
    .xml
  • About/en-US/COM.adml
    .xml
  • About/en-US/CipherSuiteOrder.adml
    .xml
  • About/en-US/Conf.adml
    .xml
  • About/en-US/ControlPanel.adml
    .xml
  • About/en-US/ControlPanelDisplay.adml
    .xml
  • About/en-US/Cpls.adml
    .xml
  • About/en-US/CredSsp.adml
    .xml
  • About/en-US/CredUI.adml
    .xml
  • About/en-US/CredentialProviders.adml
    .xml
  • About/en-US/CtrlAltDel.adml
    .xml
  • About/en-US/DCOM.adml
    .xml
  • About/en-US/DFS.adml
    .xml
  • About/en-US/DWM.adml
    .xml
  • About/en-US/Desktop.adml
    .xml
  • About/en-US/DeviceCompat.adml
    .xml
  • About/en-US/DeviceInstallation.adml
    .xml
  • About/en-US/DeviceSetup.adml
    .xml
  • About/en-US/DigitalLocker.adml
    .xml
  • About/en-US/DiskDiagnostic.adml
    .xml
  • About/en-US/DiskNVCache.adml
    .xml
  • About/en-US/DiskQuota.adml
    .xml
  • About/en-US/DistributedLinkTracking.adml
    .xml
  • About/en-US/DnsClient.adml
    .xml
  • About/en-US/EAIME.adml
    .xml
  • About/en-US/EarlyLaunchAM.adml
  • About/en-US/EdgeUI.adml
    .xml
  • About/en-US/EncryptFilesonMove.adml
    .xml
  • About/en-US/ErrorReporting.adml
    .xml
  • About/en-US/EventForwarding.adml
    .xml
  • About/en-US/EventLog.adml
    .xml
  • About/en-US/EventViewer.adml
    .xml
  • About/en-US/Explorer.adml
    .xml
  • About/en-US/ExternalBoot.adml
    .xml
  • About/en-US/FileHistory.adml
    .xml
  • About/en-US/FileRecovery.adml
    .xml
  • About/en-US/FileRevocation.adml
    .xml
  • About/en-US/FileServerVSSProvider.adml
    .xml
  • About/en-US/FileSys.adml
    .xml
  • About/en-US/FolderRedirection.adml
    .xml
  • About/en-US/FramePanes.adml
    .xml
  • About/en-US/GameExplorer.adml
    .xml
  • About/en-US/Globalization.adml
    .xml
  • About/en-US/GroupPolicy-Server.adml
    .xml
  • About/en-US/GroupPolicy.adml
    .xml
  • About/en-US/GroupPolicyPreferences.adml
    .xml
  • About/en-US/Help.adml
    .xml
  • About/en-US/HelpAndSupport.adml
    .xml
  • About/en-US/ICM.adml
    .xml
  • About/en-US/IIS.adml
    .xml
  • About/en-US/InetRes.adml
    .xml
  • About/en-US/InkWatson.adml
    .xml
  • About/en-US/KDC.adml
    .xml
  • About/en-US/Kerberos.adml
    .xml
  • About/en-US/LanmanServer.adml
    .xml
  • About/en-US/LeakDiagnostic.adml
    .xml
  • About/en-US/LinkLayerTopologyDiscovery.adml
    .xml
  • About/en-US/LocationProviderAdm.adml
    .xml
  • About/en-US/Logon.adml
    .xml
  • About/en-US/MMC.adml
    .xml
  • About/en-US/MMCSnapIns2.adml
    .xml
  • About/en-US/MMCSnapins.adml
    .xml
  • About/en-US/MSDT.adml
    .xml
  • About/en-US/MSI.adml
    .xml
  • About/en-US/MediaCenter.adml
    .xml
  • About/en-US/MobilePCMobilityCenter.adml
    .xml
  • About/en-US/MobilePCPresentationSettings.adml
    .xml
  • About/en-US/Msi-FileRecovery.adml
    .xml
  • About/en-US/NAPXPQec.adml
    .xml
  • About/en-US/NCSI.adml
    .xml
  • About/en-US/Netlogon.adml
    .xml
  • About/en-US/NetworkConnections.adml
    .xml
  • About/en-US/NetworkIsolation.adml
  • About/en-US/NetworkProjection.adml
    .xml
  • About/en-US/OfflineFiles.adml
    .xml
  • About/en-US/P2P-pnrp.adml
    .xml
  • About/en-US/ParentalControls.adml
    .xml
  • About/en-US/PeerToPeerCaching.adml
    .xml
  • About/en-US/PenTraining.adml
    .xml
  • About/en-US/PerformanceDiagnostics.adml
    .xml
  • About/en-US/PerformancePerftrack.adml
    .xml
  • About/en-US/Power.adml
    .xml
  • About/en-US/PowerShellExecutionPolicy.adml
    .xml
  • About/en-US/PreviousVersions.adml
    .xml
  • About/en-US/Printing.adml
    .xml
  • About/en-US/Printing2.adml
    .xml
  • About/en-US/Programs.adml
    .xml
  • About/en-US/PswdSync.adml
    .xml
  • About/en-US/QOS.adml
    .xml
  • About/en-US/RPC.adml
    .xml
  • About/en-US/RacWmiProv.adml
    .xml
  • About/en-US/Radar.adml
    .xml
  • About/en-US/ReAgent.adml
    .xml
  • About/en-US/Reliability.adml
    .xml
  • About/en-US/RemoteAssistance.adml
    .xml
  • About/en-US/RemovableStorage.adml
    .xml
  • About/en-US/Scripts.adml
    .xml
  • About/en-US/Securitycenter.adml
    .xml
  • About/en-US/Sensors.adml
    .xml
  • About/en-US/ServerManager.adml
    .xml
  • About/en-US/Servicing.adml
    .xml
  • About/en-US/SettingSync.adml
    .xml
  • About/en-US/Setup.adml
    .xml
  • About/en-US/SharedFolders.adml
    .xml
  • About/en-US/Sharing.adml
    .xml
  • About/en-US/Shell-CommandPrompt-RegEditTools.adml
    .xml
  • About/en-US/ShellWelcomeCenter.adml
    .xml
  • About/en-US/Sidebar.adml
    .xml
  • About/en-US/SkyDrive.adml
    .xml
  • About/en-US/Smartcard.adml
    .xml
  • About/en-US/Snis.adml
    .xml
  • About/en-US/Snmp.adml
    .xml
  • About/en-US/SoundRec.adml
    .xml
  • About/en-US/StartMenu.adml
    .xml
  • About/en-US/SystemRestore.adml
    .xml
  • About/en-US/TPM.adml
    .xml
  • About/en-US/TabletPCInputPanel.adml
    .xml
  • About/en-US/TabletShell.adml
    .xml
  • About/en-US/TaskScheduler.adml
    .xml
  • About/en-US/Taskbar.adml
    .xml
  • About/en-US/TerminalServer-Server.adml
    .xml
  • About/en-US/TerminalServer.adml
    .xml
  • About/en-US/Thumbnails.adml
    .xml
  • About/en-US/TouchInput.adml
    .xml
  • About/en-US/UserProfiles.adml
    .xml
  • About/en-US/VolumeEncryption.adml
    .xml
  • About/en-US/W32Time.adml
    .xml
  • About/en-US/WCM.adml
    .xml
  • About/en-US/WDI.adml
    .xml
  • About/en-US/WPN.adml
    .xml
  • About/en-US/WinCal.adml
    .xml
  • About/en-US/WinInit.adml
    .xml
  • About/en-US/WinLogon.adml
    .xml
  • About/en-US/Windows.adml
    .xml
  • About/en-US/WindowsAnytimeUpgrade.adml
    .xml
  • About/en-US/WindowsBackup.adml
    .xml
  • About/en-US/WindowsColorSystem.adml
    .xml
  • About/en-US/WindowsConnectNow.adml
    .xml
  • About/en-US/WindowsDefender.adml
  • About/en-US/WindowsExplorer.adml
    .xml
  • About/en-US/WindowsFileProtection.adml
    .xml
  • About/en-US/WindowsFirewall.adml
    .xml
  • About/en-US/WindowsMail.adml
    .xml
  • About/en-US/WindowsMediaDRM.adml
    .xml
  • About/en-US/WindowsMediaPlayer.adml
    .xml
  • About/en-US/WindowsMessenger.adml
    .xml
  • About/en-US/WindowsProducts.adml
    .xml
  • About/en-US/WindowsRemoteManagement.adml
    .xml
  • About/en-US/WindowsRemoteShell.adml
    .xml
  • About/en-US/WindowsServer.adml
    .xml
  • About/en-US/WindowsUpdate.adml
    .xml
  • About/en-US/Winsrv.adml
    .xml
  • About/en-US/WordWheel.adml
    .xml
  • About/en-US/WorkFolders-Client.adml
    .xml
  • About/en-US/WorkplaceJoin.adml
    .xml
  • About/en-US/fthsvc.adml
    .xml
  • About/en-US/hotspotauth.adml
    .xml
  • About/en-US/iSCSI.adml
    .xml
  • About/en-US/msched.adml
    .xml
  • About/en-US/nca.adml
  • About/en-US/pca.adml
    .xml
  • About/en-US/sdiageng.adml
    .xml
  • About/en-US/srm-fci.adml
    .xml
  • About/en-US/tcpip.adml
    .xml
  • About/en-US/wlansvc.adml
    .xml
  • About/en-US/wwansvc.adml
    .xml
  • About/hotspotauth.admx
  • About/iSCSI.admx
  • About/inetres.admx
    .xml
  • About/kdc.admx
  • About/maxresdefault.jpg
    .jpg
  • About/mchammer_x64.dll
    .dll regsvr32 windows x64

    Password: 55555

    ce8163474c63d04adf7ad44f68b2c5e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • About/mkl_def.1.dll
    .dll windows x64

    Password: 55555

    5e6d5c0dd72cf0e0075c17b32e860f2e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • About/mkl_mc3.1.dll
    .dll windows x64

    Password: 55555

    5e6d5c0dd72cf0e0075c17b32e860f2e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • About/mkl_sequential.1.dll
    .dll windows x64

    Password: 55555

    8c312aae617219c4526c01c5665989cb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • About/msched.admx
    .xml
  • About/nca.admx
  • About/pca.admx
  • About/protects.dll
    .dll windows x86

    Password: 55555

    51ff02966290196a04c26ac9d0347d63


    Headers

    Imports

    Sections

  • About/sdiageng.admx
  • About/sfppack2_x64.dll
    .dll windows x64

    Password: 55555


    Headers

    Sections

  • Setup.exe
    .exe windows x86

    Password: 55555

    3df8a90d4268e78d291337a5520edbd9


    Code Sign

    Headers

    Imports

    Sections

  • Setup_64bit_beta.exe
    .exe windows x64

    Password: 55555


    Code Sign

    Headers

    Sections

  • en-us.txt