Overview

overview

10

Static

static

7

9438b1bd80...4d.exe

windows7-x64

10

9438b1bd80...4d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9438b1bd807138a06bd30d58f6b9d84d

  • Size

    6.2MB

  • Sample

    240206-jzv3qabec6

  • MD5

    9438b1bd807138a06bd30d58f6b9d84d

  • SHA1

    dae95568f3944b72d2c7e02eca17c8824f5abe54

  • SHA256

    47fd76d215a1b6352194258ec50a2fecd89d68995995d801d6040731d3e3a800

  • SHA512

    35de3b7a2c7aa490838f325c58f9d3d7bdc9f87e4aa640045c81762900b6662516c6de3111260731fd8b220da695e9546bea29a2fad6c6ecc0ce73c79fb5b67b

  • SSDEEP

    196608:rhuDpBTVBvPr9oCHkPHGUxcXeuwu7XZNSstVIn1/7/Re:rhaBBBnrNcHGUaLwcuXn+

Score
10/10
colibriloadervmprotect

Malware Config

Extracted

Family

colibri

C2

http://80.92.205.102/gate.php

rc4.plain

Targets

    • Target

      9438b1bd807138a06bd30d58f6b9d84d

    • Size

      6.2MB

    • MD5

      9438b1bd807138a06bd30d58f6b9d84d

    • SHA1

      dae95568f3944b72d2c7e02eca17c8824f5abe54

    • SHA256

      47fd76d215a1b6352194258ec50a2fecd89d68995995d801d6040731d3e3a800

    • SHA512

      35de3b7a2c7aa490838f325c58f9d3d7bdc9f87e4aa640045c81762900b6662516c6de3111260731fd8b220da695e9546bea29a2fad6c6ecc0ce73c79fb5b67b

    • SSDEEP

      196608:rhuDpBTVBvPr9oCHkPHGUxcXeuwu7XZNSstVIn1/7/Re:rhaBBBnrNcHGUaLwcuXn+

    Score
    10/10
    colibriloadervmprotect

    • Colibri Loader

      A loader sold as MaaS first seen in August 2021.

      loadercolibri

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks