General

  • Target

    2024-05-29_58bc8e6b6a75355911a804ed5bfa02f9_mafia_revil

  • Size

    11.8MB

  • MD5

    58bc8e6b6a75355911a804ed5bfa02f9

  • SHA1

    1a58f562f3b925ce35fe50c55b9f588297cb2c8a

  • SHA256

    6452a9d5549311d1611d68155d242cc7694e83de3a1258d49dbd8e81da512f6a

  • SHA512

    d8dbe6864a61db3b5719d5a781f53f483dafadb2724f374d1913e764edb24d3e0f02b993e16ee49190e956cb7c5f7eb85e14132fc9f795c124b946188711891a

  • SSDEEP

    98304:rE0w489W/ruAMeiX+srKShjFQLcMNP7umtkBXttwB2/prjpnGI3IZJv:rfeF6FofRBt3Ibv

Score
10/10

Malware Config

Signatures

  • Detects executables packed with VMProtect. 1 IoCs
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_58bc8e6b6a75355911a804ed5bfa02f9_mafia_revil
    .exe windows:5 windows x86 arch:x86

    2d7b6a804f9643399a2402e34f778c64


    Headers

    Imports

    Sections