General

  • Target

    ForlornInject.exe

  • Size

    11.1MB

  • MD5

    3af69b685cd9508c92c467f53b68a781

  • SHA1

    ebc7a88be765970fed5c3bfcd8d44b7e01e40c40

  • SHA256

    1295733e9a325c9a484886d661271e074ba04117d4679fe6af4dbc1373b50fa5

  • SHA512

    d84c1666f34021660b797b57f1798dbb82d6752c64ed3695d32214d5593fac689276fb06fbb55554c4d8f63a320d7c4eb69e77d9493a8ae4551ec1e558782ca3

  • SSDEEP

    98304:N+FlElRVS7/o3xhNCvPUg9Ujnlsdjb/jz1bQ0hEC/zumr1IHTST5zKzti7d1jvn:NOEXVS7/o3xhNecsg2HJEpVUgztE1D

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ForlornInject.exe
    .exe windows:6 windows x64 arch:x64

    22f1907af71b391673dc37c47e7cfa75


    Headers

    Imports

    Exports

    Sections