Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
25/06/2024, 02:41
Static task
static1
Behavioral task
behavioral1
Sample
d0f3503a704d618cb378b5f070596447e184a58db1c868ff0d5c95d1afa63335.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
d0f3503a704d618cb378b5f070596447e184a58db1c868ff0d5c95d1afa63335.exe
Resource
win10v2004-20240611-en
General
-
Target
d0f3503a704d618cb378b5f070596447e184a58db1c868ff0d5c95d1afa63335.exe
-
Size
2.9MB
-
MD5
e943ab7da0b559954ab3dfee8adaedff
-
SHA1
0578c90af437b983a8123947fc07d028f4b0f99e
-
SHA256
d0f3503a704d618cb378b5f070596447e184a58db1c868ff0d5c95d1afa63335
-
SHA512
075b555c5d04d09c2682c1b795b1c8e67b1cfde70b345bd3bacb430ac9cb31d7ede3f65732efe32781b5e3aaf7d73575a1555d481a13e2a87e28598081b5a4d5
-
SSDEEP
24576:8T+lw8ji3IvTLdhBefqpealTS0Wl7dYiYgztA7TQiq2DG9vq0Jw4ih140GsNu1V6:8GhU4dhofmNf9qrbZ470dGXs926bB4
Malware Config
Signatures
-
Detects executables packed with VMProtect. 4 IoCs
resource yara_rule behavioral1/memory/1916-1-0x0000000000400000-0x00000000006DD000-memory.dmp INDICATOR_EXE_Packed_VMProtect behavioral1/memory/1916-3-0x0000000000400000-0x00000000006DD000-memory.dmp INDICATOR_EXE_Packed_VMProtect behavioral1/memory/1916-4-0x0000000000400000-0x000000000047F000-memory.dmp INDICATOR_EXE_Packed_VMProtect behavioral1/memory/1916-5-0x0000000000400000-0x000000000047F000-memory.dmp INDICATOR_EXE_Packed_VMProtect