General
- Target 7c179f962ec2e24b92f55b37933e8c0d64d13166d5a97353fe095540efb7f6e5
- Size 1.5MB
- Sample240613-d6bd1ashla
- SHA256 7c179f962ec2e24b92f55b37933e8c0d64d13166d5a97353fe095540efb7f6e5
Score
7/10
Malware Config
Targets
-
- Target 7c179f962ec2e24b92f55b37933e8c0d64d13166d5a97353fe095540efb7f6e5
- Size 1.5MB
- SHA256 7c179f962ec2e24b92f55b37933e8c0d64d13166d5a97353fe095540efb7f6e5
Score7/10VMProtect packed file
Detects executables packed with VMProtect commercial packer.
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
Suspicious use of NtSetInformationThreadHideFromDebugger