Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27/03/2024, 21:34
Static task
static1
Behavioral task
behavioral1
Sample
7be73555f34fd12fbeba593fc6424e2f302da24903bcff9c28ddeef52613de16.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7be73555f34fd12fbeba593fc6424e2f302da24903bcff9c28ddeef52613de16.exe
Resource
win10v2004-20240226-en
General
-
Target
7be73555f34fd12fbeba593fc6424e2f302da24903bcff9c28ddeef52613de16.exe
-
Size
2.6MB
-
MD5
ed9c8d0dc9ffb7a74c38a892f742782c
-
SHA1
64d4d6911597cd4aaa3e44b500c6d858dbd9de64
-
SHA256
7be73555f34fd12fbeba593fc6424e2f302da24903bcff9c28ddeef52613de16
-
SHA512
9f5498ba00a64da66898c94101ad6c343b5f4a0ccf4449e2e8ed0a88d25313c33a3496d2c09ee89e10daa48374bcfc3deda553235d3418e4811ffd583ce8e794
-
SSDEEP
49152:Ap0UipWpQp3Pp/zpAHp3Knpoxu0jDybRdzi8Tvs8+iqy+2nuL:ApjipWpQp/p7pAHp3Knpoxlvwdzi8TZA
Malware Config
Signatures
-
Detects executables packed with VMProtect. 3 IoCs
resource yara_rule behavioral1/memory/1920-2-0x0000000000400000-0x0000000000694000-memory.dmp INDICATOR_EXE_Packed_VMProtect behavioral1/memory/1920-1-0x0000000000400000-0x0000000000694000-memory.dmp INDICATOR_EXE_Packed_VMProtect behavioral1/memory/1920-3-0x0000000000400000-0x0000000000694000-memory.dmp INDICATOR_EXE_Packed_VMProtect