General

  • Target

    backend.zip

  • Size

    18.5MB

  • MD5

    96a0baa028ad46060ea41b381bdda5a9

  • SHA1

    026b5cbc9d952212912f163021b4945e72670b6c

  • SHA256

    e43c506e62a9aefc0c1b63e65f3b1f22a3bde310e66c1983a89e1218ed611512

  • SHA512

    59065c7fce020fdcf43a7bac784b71f2617cb96e400268577dfe2e272edc2b936ab9f9e35b029909bae016621674dea83edfda9bb469693e542611908d9b8585

  • SSDEEP

    393216:g2BL14+x4EnVRDTR8meN17u1rMWB2VA5jo+NZyo/Mt3hqxJYv:l2BEnVNR8muM1rnsVA1o+2o0S7Yv

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • backend.zip
    .zip
  • backend.dll
    .dll windows:6 windows x64 arch:x64

    ac8baee4fc7cdda5c2bd0982146163bf


    Headers

    Imports

    Exports

    Sections

  • build.vmp.exe
    .exe windows:6 windows x64 arch:x64

    99ad014892fb86befa716db7ab350b85


    Headers

    Imports

    Exports

    Sections

  • intellect.json