Overview

overview

7

Static

static

7

run me.cmd

windows10-2004-x64

1

sex.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    MONOLITH LAST RELEASE EVER.zip

  • Size

    5.7MB

  • MD5

    0b17b7f121c59b220c4bad7b8e73adc3

  • SHA1

    f35c5b2123e465f83a64ec0456914b9264c895aa

  • SHA256

    baeae8208701d426baa16e55b0c144322b0d2e8585be6106ec59ed95201c53a6

  • SHA512

    986239d7ded04df9ede6f23557d9fe0676c106fe26633dbbd592ac05fe47e7d5fd1b96f44eab9482c376cd3e77945d9e773f0030f86bde18aa884fec8fda8b69

  • SSDEEP

    98304:kRxGZejc8MBC/j9nY540SycFBBmeenYcYkBPAea+27I6QrR8x+DsRRny+ZfPz:kRxuhBk6vSyc4jYcYcMIJV84DKRLz

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MONOLITH LAST RELEASE EVER.zip
    .zip
  • autoexec/autoexec-test.lua
  • run me.cmd
    .cmd .vbs
  • sex.exe
    .exe windows:6 windows x64 arch:x64

    2c2190163a33060c834ffbf6caea0864


    Headers

    Imports

    Sections

  • workspace/.IY
  • workspace/tests/writefile.txt