Overview

overview

7

Static

static

7

noskill_loader.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    noskill_loader.exe

  • Size

    367KB

  • Sample

    240102-ssg2ysbbe9

  • MD5

    fc4fd2c82dfa331c4b2215584c35296f

  • SHA1

    269f1d01a3c0e1ef56a56aa678a4352b75c259da

  • SHA256

    3859847f8f8b16aa2741ab65c29312d56255d3873bc67dc914201b9b867a42f4

  • SHA512

    c61fc1e629411d966d4f69cb2fe7eefab1ed79bde3e2267bfaee8983a62a03f871bc773a544a7532ed7406b1909d0b41a49f15f940b98656166fa9d222743b32

  • SSDEEP

    6144:ixD84WuED8mv42n9OWkX8bZLLaXkaItDnK2XDyy3W9rs/z5AVFQida:cD87uA8mvbn4Wd0XkNK2XDykWV8+

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      noskill_loader.exe

    • Size

      367KB

    • MD5

      fc4fd2c82dfa331c4b2215584c35296f

    • SHA1

      269f1d01a3c0e1ef56a56aa678a4352b75c259da

    • SHA256

      3859847f8f8b16aa2741ab65c29312d56255d3873bc67dc914201b9b867a42f4

    • SHA512

      c61fc1e629411d966d4f69cb2fe7eefab1ed79bde3e2267bfaee8983a62a03f871bc773a544a7532ed7406b1909d0b41a49f15f940b98656166fa9d222743b32

    • SSDEEP

      6144:ixD84WuED8mv42n9OWkX8bZLLaXkaItDnK2XDyy3W9rs/z5AVFQida:cD87uA8mvbn4Wd0XkNK2XDykWV8+

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix

Tasks