Overview

overview

7

Static

static

1

Rei das NF...er.zip

windows7-x64

1

Rei das NF...er.zip

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Rei das NFA - Skin Changer.zip

  • Size

    5.3MB

  • Sample

    241017-vcwaravgkb

  • MD5

    3a10222a84aeacf6ae0a2e4bc91226e1

  • SHA1

    366e09dd67afd90c91d9bfd3cbdf6918aba837e1

  • SHA256

    6b8ee61c8e28afa8db2aa24a97a40ac0fcb7ded9338e96d8827fb00cf740dd47

  • SHA512

    c14ddbef6c3b6df682df1dcc783cad48eabbe6faf840d583b741f0bd5f0d664fd399488adfd82313b7b496714032f420dac7f8292a7565cbe75b53636ee1fe66

  • SSDEEP

    98304:ou6a80ZYk0+HY0X73YuX9wWaZphrhh96ZUNL7r1/d+zEFi7yIKQFeovIpN8x:ouP8eYk0+4K7BZaZpth0yHKzEFe0+uax

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      Rei das NFA - Skin Changer.zip

    • Size

      5.3MB

    • MD5

      3a10222a84aeacf6ae0a2e4bc91226e1

    • SHA1

      366e09dd67afd90c91d9bfd3cbdf6918aba837e1

    • SHA256

      6b8ee61c8e28afa8db2aa24a97a40ac0fcb7ded9338e96d8827fb00cf740dd47

    • SHA512

      c14ddbef6c3b6df682df1dcc783cad48eabbe6faf840d583b741f0bd5f0d664fd399488adfd82313b7b496714032f420dac7f8292a7565cbe75b53636ee1fe66

    • SSDEEP

      98304:ou6a80ZYk0+HY0X73YuX9wWaZphrhh96ZUNL7r1/d+zEFi7yIKQFeovIpN8x:ouP8eYk0+4K7BZaZpth0yHKzEFe0+uax

    Score
    7/10
    vmprotect

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks