General

  • Target

    lzp.zip

  • Size

    5.4MB

  • MD5

    bc84e2815523648238d687551c53092a

  • SHA1

    92e36c313e1efb6caf58bb55592f8d0c16aea5ee

  • SHA256

    0f815e77890f9d841a741f82a929043b8768612062720716ce39f7f8734390f0

  • SHA512

    47d2439f77cc289ab2c193388d5c75497c08d65a7e3c9f6ddc16728a03cdf088d71d90b2ff92d22a292ea89c81cf7e0a7511e3c9254871f19b2b0ac9fc5cc0bf

  • SSDEEP

    98304:DcHg10JkiHnW6UrvQiWdo/rk0sFX7FBSmXQ7yEj+xQQ86thLRXTg3m:DcHPD26UrQiGo/IXFrSmX4hjDuhLRXT3

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • lzp.zip
    .zip

    Password: 998762s

  • fkanf.exe
    .exe windows:5 windows x86 arch:x86

    Password: 998762s

    c51b308cc6587b44c4b8c8af6b266c69


    Headers

    Imports

    Sections