General

  • Target

    00031-00068.cap

  • Size

    3.2MB

  • MD5

    5b90d9bfcf283f41398d639014b2a276

  • SHA1

    83be72ca78162b7e9438c956827354147089f2a6

  • SHA256

    29e73739d0fadc537e56f8657c4b30ee9d1b3966b5ddaac12afb4b18a7acbd87

  • SHA512

    c1a2b0f9a400ddccee5e3529ad77b2f643d29a1eeae076c95ef78488a3bbd2158a74221b4a001f57b04ca2abf2394ff182f71a0836afc12825cd8212c9d61c2f

  • SSDEEP

    98304:jPN4gfTSEzxvTv284GyoBViMY9J13y1qV50:bT9xrO8Tji/1iYA

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

Files

  • 00031-00068.cap
    .zip

    Password: S@ndb0x!2023@@

  • Device/HarddiskVolume5/Program Files/Tally.ERP9/capsules/00031-00068.cap
    .exe windows x86

    Password: S@ndb0x!2023@@

    e6a10b1097b1b1546a56ed1e5939d61c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • manifest.json