General

  • Target

    Files.rar

  • Size

    25.3MB

  • MD5

    c7d2157571bfd017a8136720ca929fd0

  • SHA1

    66b3a6dbc531ba9f83af186c19f6f735960b7115

  • SHA256

    a2a0015932d7924c2ef74fe7546f791f1c15862af0f9898f3f61fc9cfbfaa080

  • SHA512

    37da344296647d3a4231e5af3fa034926e98ddaf9c032986d56eb167bdb18c5a4c351daef24341bb196ee31762d6408a8135b5ce81fc614e96e8159fda017c2d

  • SSDEEP

    786432:80cXMz9pmb2Givl2NYBtZoJpQFdHZ4VIaD4sn:oI9rGKl2N0Zob2PCIaEsn

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Files.rar
    .rar
  • Folda/VCRUNTIME148D.exe
    .exe windows:6 windows x64 arch:x64

    b0219d364144a24f8104ef9f7bfb8c2d


    Headers

    Imports

    Exports

    Sections

  • Folda/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    4be87606e4e1b15f6b3d912f5b4b1b5c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Folda/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    8a1a68e582e5fb5da55f95bf56c6d914


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Folda/maper.vmp.exe
    .exe windows:6 windows x64 arch:x64

    47daeee53a60aca36d031c1bb4def374


    Headers

    Imports

    Sections