General
- Target VMFS_Recovery.exe
- Size 48.2MB
- Sample240612-e2j11s1bnf
- SHA256 411c917f6338e6126787d7e5ecc318913581fb5a2bfc5d0548eb0b41e3b3af7a
Score
7/10
Malware Config
Targets
-
- Target VMFS_Recovery.exe
- Size 48.2MB
- SHA256 411c917f6338e6126787d7e5ecc318913581fb5a2bfc5d0548eb0b41e3b3af7a
Score7/10-
VMProtect packed file
Detects executables packed with VMProtect commercial packer.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger