Overview

overview

9

Static

static

1

iFRPFILE A....6.zip

windows10-1703-x64

9

Resubmissions

06/09/2026, 19:44

260906-yfzzwsfp6x1

05/08/2026, 21:14

260805-z3ah7a11aw

12/04/2026, 08:20

260412-j8r3esfz5j1

27/03/2026, 07:27

260327-jafazagv6w

06/07/2025, 13:50

250706-q5e21syta1

23/01/2024, 03:06

240123-dltd3sfcbm9

23/01/2024, 03:02

240123-djgx9sfhd91

Sharing

Copy URL Twitter E-mail

General

  • Target
    iFRPFILE AIO v2.8.6.zip
  • Size 39.3MB
  • Sample240123-dltd3sfcbm
  • SHA256 767091a7c1294e9909cf14424ba538fb3a40569d4a1cbb86ffeed199e9745328
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10
agilenetevasionthemida

Malware Config

Targets

    • Target
      iFRPFILE AIO v2.8.6.zip
    • Size 39.3MB
    • SHA256 767091a7c1294e9909cf14424ba538fb3a40569d4a1cbb86ffeed199e9745328
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    agilenetevasionthemida

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Loads dropped DLL

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks