Overview

overview

10

Static

static

10

WSHRat.3.4.1.exe

windows7-x64

7

WSHRat.3.4.1.exe

windows10-2004-x64

7

Resubmissions

30-07-2023 23:09

230730-25hzfsbf59 10

30-07-2023 19:27

230730-x54hyabb92 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    WSHRat.3.4.1.exe

  • Size

    3.5MB

  • MD5

    8a470899a6ebb2299b54da55ad3897d2

  • SHA1

    1ebafddb262fe912641e260fcf407907ca67fb74

  • SHA256

    7e160f885fe15d7f5b67e3d321c1bd8240a63bb80c8156f604829f0cbadba313

  • SHA512

    dde4489c467d232c5b8e7930ff0991c33aa1477666984bf69559556229b5a76951015fe38993d7289acb5aa5e9661126ed1ac9878cf44a4fbf9b06e57e1275b4

  • SSDEEP

    49152:SMQyNFL4gSeOzD5rbhdU7bSVziW+Gz/6Sq5ms7Otvx2mAmMm0pFZMpTBkRdFFU2:NL4B35rbhCkiStvx2GcFZM1BOU

Score
10/10
vmprotectwshrat

Malware Config

Signatures

  • WSHRAT payload 1 IoCs
  • Wshrat family
    wshrat
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WSHRat.3.4.1.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections