General

  • Target

    NEAS.b82cb2dee03214db18e5c12f3f5f5e90.exe

  • Size

    9.8MB

  • MD5

    b82cb2dee03214db18e5c12f3f5f5e90

  • SHA1

    1501d0755b22f01e7e90341347e0f335b63f8dac

  • SHA256

    e4c4179a95743284ca9bfed7fd03f244ec7089efd0abdf2d81c5c96c74f3a5c3

  • SHA512

    d77d05fbbe5cf42c9e27e83699bbe560f5de5c183f60ad34e0496c7d4ef9311738a8e57794ea23c7253e833c7590e18f99a1c51068c329262a49d44e73a0c7a7

  • SSDEEP

    196608:xlKIUbR/hXOg8GVp+zeoEHN/QtEgvuzx9i90b5Gl6TL:ebR1KO5IEcg9vT

Malware Config

Signatures

  • Privateloader family
  • Risepro family
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.b82cb2dee03214db18e5c12f3f5f5e90.exe
    .exe windows:6 windows x86


    Headers

    Sections