Behavioral task
behavioral1
Sample
VAC2 Proof Project VDC Redux 2.03/Project VDC.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VAC2 Proof Project VDC Redux 2.03/Project VDC.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
VAC2 Proof Project VDC Redux 2.03/Project VDC.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
VAC2 Proof Project VDC Redux 2.03/Project VDC.exe
Resource
win10v2004-20231215-en
General
-
Target
97e4cda038bf7e77923de2f68554255e
-
Size
447KB
-
MD5
97e4cda038bf7e77923de2f68554255e
-
SHA1
59d2bfa9631f9dabd208851340a74f59f218292f
-
SHA256
6e4920bb022ab6c80744974664993d8bbb5a0ef40266d5549a33067034def938
-
SHA512
6443f19c34d1e6f2148337d45820b19c54716e547cac1604b4f92b4eccbc41245896811d95421541b677baf0b2252285512fb0788f56502f37a708c69dbb5287
-
SSDEEP
12288:r/E14Al8TxCw9EAq7K28A1zWYVrtvXd+RSQ0A:zE1Hl8O228A1yYnV+sHA
Malware Config
Signatures
-
Detect Lumma Stealer payload V4 1 IoCs
resource yara_rule static1/unpack002/out.upx family_lumma_v4 -
Lumma family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack001/VAC2 Proof Project VDC Redux 2.03/Project VDC.dll acprotect -
resource yara_rule static1/unpack001/VAC2 Proof Project VDC Redux 2.03/Project VDC.dll upx static1/unpack001/VAC2 Proof Project VDC Redux 2.03/Project VDC.exe upx -
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/VAC2 Proof Project VDC Redux 2.03/Project VDC.dll unpack002/out.upx unpack001/VAC2 Proof Project VDC Redux 2.03/Project VDC.exe
Files
-
97e4cda038bf7e77923de2f68554255e.rar
-
VAC2 Proof Project VDC Redux 2.03/(ЧИТАТЬ)Readme.txt
-
VAC2 Proof Project VDC Redux 2.03/Project VDC.dll.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 384KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 248KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
VAC2 Proof Project VDC Redux 2.03/Project VDC.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 235KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
VAC2 Proof Project VDC Redux 2.03/binds/(ЧИТАТЬ)Readme.txt
-
VAC2 Proof Project VDC Redux 2.03/binds/binds_cstrike.cfg
-
VAC2 Proof Project VDC Redux 2.03/binds/binds_czero.cfg
-
VAC2 Proof Project VDC Redux 2.03/binds/binds_dod.cfg
-
VAC2 Proof Project VDC Redux 2.03/binds/binds_ns.cfg
-
VAC2 Proof Project VDC Redux 2.03/binds/binds_nsp.cfg
-
VAC2 Proof Project VDC Redux 2.03/binds/binds_tfc.cfg
-
VAC2 Proof Project VDC Redux 2.03/binds/binds_ts.cfg
-
VAC2 Proof Project VDC Redux 2.03/binds/binds_valve.cfg
-
VAC2 Proof Project VDC Redux 2.03/colors.cfg
-
VAC2 Proof Project VDC Redux 2.03/cvars/(ЧИТАТЬ)Readme.txt
-
VAC2 Proof Project VDC Redux 2.03/cvars/cvar_cstrike.cfg
-
VAC2 Proof Project VDC Redux 2.03/cvars/cvar_czero.cfg
-
VAC2 Proof Project VDC Redux 2.03/cvars/cvar_default.cfg
-
VAC2 Proof Project VDC Redux 2.03/cvars/cvar_dod.cfg
-
VAC2 Proof Project VDC Redux 2.03/cvars/cvar_ns.cfg
-
VAC2 Proof Project VDC Redux 2.03/cvars/cvar_nsp.cfg
-
VAC2 Proof Project VDC Redux 2.03/cvars/cvar_tfc.cfg
-
VAC2 Proof Project VDC Redux 2.03/cvars/cvar_ts.cfg
-
VAC2 Proof Project VDC Redux 2.03/cvars/cvar_valve.cfg
-
VAC2 Proof Project VDC Redux 2.03/hlss/(ЧИТАТЬ)Readme.txt
-
VAC2 Proof Project VDC Redux 2.03/hlss/3Inposition.wav
-
VAC2 Proof Project VDC Redux 2.03/main.cfg
-
VAC2 Proof Project VDC Redux 2.03/menus/(ЧИТАТЬ)Readme.txt
-
VAC2 Proof Project VDC Redux 2.03/menus/menu_cstrike.txt
-
VAC2 Proof Project VDC Redux 2.03/menus/menu_czero.txt
-
VAC2 Proof Project VDC Redux 2.03/menus/menu_default.txt
-
VAC2 Proof Project VDC Redux 2.03/menus/menu_dod.txt
-
VAC2 Proof Project VDC Redux 2.03/menus/menu_ns.txt
-
VAC2 Proof Project VDC Redux 2.03/menus/menu_nsp.txt
-
VAC2 Proof Project VDC Redux 2.03/menus/menu_tfc.txt
-
VAC2 Proof Project VDC Redux 2.03/menus/menu_ts.txt
-
VAC2 Proof Project VDC Redux 2.03/menus/menu_valve.txt
-
VAC2 Proof Project VDC Redux 2.03/misc/(ЧИТАТЬ)Readme.txt
-
VAC2 Proof Project VDC Redux 2.03/misc/version.ini
-
VAC2 Proof Project VDC Redux 2.03/readme.txt