Overview

overview

7

Static

static

7

Voltage.dll

windows11-21h2-x64

7

Resubmissions

05/08/2024, 09:51

240805-lvgewasfpq 7

05/08/2024, 09:49

240805-ltke5ssfmm 7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Voltage.dll

  • Size

    6.5MB

  • Sample

    240805-lvgewasfpq

  • MD5

    6573ce7970405983186828a58288ff53

  • SHA1

    e1c5abfb07a20dfd23d244c69d7ec4c5a880aaf4

  • SHA256

    0d20e777de144bc47062c083bbb8e20c2c504c989ebcc7c97c2833c255a6da48

  • SHA512

    4f0d9ad54a3473a9cc13ab36dcbdf5b423a872a01169e6bddd2821459005dab2fccbe035c2d6146a4836a22a4c9822183c6ed5ab0630b188ed2d5cd753516777

  • SSDEEP

    196608:YN6KheqIwhuvk0dY17DEcWfTVZjpZ6e/a4QSIt/hj:YN6KhekhuvkGOUrTZzy4MZ

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      Voltage.dll

    • Size

      6.5MB

    • MD5

      6573ce7970405983186828a58288ff53

    • SHA1

      e1c5abfb07a20dfd23d244c69d7ec4c5a880aaf4

    • SHA256

      0d20e777de144bc47062c083bbb8e20c2c504c989ebcc7c97c2833c255a6da48

    • SHA512

      4f0d9ad54a3473a9cc13ab36dcbdf5b423a872a01169e6bddd2821459005dab2fccbe035c2d6146a4836a22a4c9822183c6ed5ab0630b188ed2d5cd753516777

    • SSDEEP

      196608:YN6KheqIwhuvk0dY17DEcWfTVZjpZ6e/a4QSIt/hj:YN6KhekhuvkGOUrTZzy4MZ

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks