Extracted

• • Target

    febdcc68bc06b6d026841745d35eee5e9b84df2d9ad68d567d2ac11c7388075e

  • Size

    5.2MB

  • MD5

    36097c679c0410351d143f8901643314

  • SHA1

    8dad059e00d81857f9b97474bf7bb54d1a35513f

  • SHA256

    febdcc68bc06b6d026841745d35eee5e9b84df2d9ad68d567d2ac11c7388075e

  • SHA512

    91801a25b0f1a9a01bb793f54ca879125edb088bf506623b8272b4ba9dcfbfd3d0187af84853cb487e98c078c4d5e8bf35475db05de0c3a0876e897d307c3710

  • SSDEEP

    98304:pSvH5SALvCCKS3Wb14lZc2ZVXE+qIcZ26ChibdcR:peyCKS3Wb1CG4VXlqfZjCc5

  Score

  10^/10

  metasploitbackdoortrojanvmprotect

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

    vmprotect

  • Suspicious use of SetThreadContext

  behavioral1behavioral2