Overview
overview
7Static
static
7VMProtect-...ed.exe
windows7-x64
3VMProtect-...ed.exe
windows10-2004-x64
3VMProtect-...K32.so
ubuntu-22.04-amd64
1VMProtect-...K64.so
ubuntu-22.04-amd64
1VMProtect-....dylib
macos-10.15-amd64
1VMProtect-...32.dll
windows7-x64
3VMProtect-...32.dll
windows10-2004-x64
3VMProtect-...64.dll
windows7-x64
1VMProtect-...64.dll
windows10-2004-x64
1VMProtect-...32.dll
windows7-x64
3VMProtect-...32.dll
windows10-2004-x64
3VMProtect-...64.dll
windows7-x64
1VMProtect-...64.dll
windows10-2004-x64
1VMProtect-...el.exe
windows7-x64
3VMProtect-...el.exe
windows10-2004-x64
3VMProtect-...ct.exe
windows7-x64
5VMProtect-...ct.exe
windows10-2004-x64
5VMProtect-...on.exe
windows7-x64
5VMProtect-...on.exe
windows10-2004-x64
5VMProtect-...32.dll
windows7-x64
3VMProtect-...32.dll
windows10-2004-x64
3VMProtect-...64.dll
windows7-x64
7VMProtect-...64.dll
windows10-2004-x64
7VMProtect-...or.exe
windows7-x64
3VMProtect-...or.exe
windows10-2004-x64
3VMProtect-...ib.dll
windows7-x64
1VMProtect-...ib.dll
windows10-2004-x64
1VMProtect-...st.exe
windows7-x64
1VMProtect-...st.exe
windows10-2004-x64
1VMProtect-...mp.exe
windows7-x64
7VMProtect-...mp.exe
windows10-2004-x64
7VMProtect-...K32.so
ubuntu-24.04-amd64
1Analysis
-
max time kernel
66s -
max time network
137s -
platform
macos-10.15_amd64 -
resource
macos-20241101-en -
resource tags
arch:amd64arch:i386image:macos-20241101-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
20-11-2024 18:56
Behavioral task
behavioral1
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Confused.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Confused.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/Linux/libVMProtectSDK32.so
Resource
ubuntu2204-amd64-20240522.1-en
Behavioral task
behavioral4
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/Linux/libVMProtectSDK64.so
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral5
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/OSX/libVMProtectSDK.dylib
Resource
macos-20241101-en
Behavioral task
behavioral6
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/Windows/VMProtectDDK32.dll
Resource
win7-20240903-en
Behavioral task
behavioral7
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/Windows/VMProtectDDK32.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral8
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/Windows/VMProtectDDK64.dll
Resource
win7-20240903-en
Behavioral task
behavioral9
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/Windows/VMProtectDDK64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral10
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/Windows/VMProtectSDK32.dll
Resource
win7-20241023-en
Behavioral task
behavioral11
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/Windows/VMProtectSDK32.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral12
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/Windows/VMProtectSDK64.dll
Resource
win7-20240903-en
Behavioral task
behavioral13
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/Windows/VMProtectSDK64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral14
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Panel.exe
Resource
win7-20241010-en
Behavioral task
behavioral15
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Panel.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral16
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/VMProtect.exe
Resource
win7-20240903-en
Behavioral task
behavioral17
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/VMProtect.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral18
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/VMProtect_Con.exe
Resource
win7-20240708-en
Behavioral task
behavioral19
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/VMProtect_Con.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral20
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/VMProtect_Ext32.dll
Resource
win7-20240903-en
Behavioral task
behavioral21
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/VMProtect_Ext32.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral22
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/VMProtect_Ext64.dll
Resource
win7-20241010-en
Behavioral task
behavioral23
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/VMProtect_Ext64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral24
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/VaporObfuscator.exe
Resource
win7-20240903-en
Behavioral task
behavioral25
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/VaporObfuscator.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral26
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/dnlib.dll
Resource
win7-20240903-en
Behavioral task
behavioral27
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/dnlib.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral28
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/test.exe
Resource
win7-20241023-en
Behavioral task
behavioral29
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/test.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral30
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/test.vmp.exe
Resource
win7-20240903-en
Behavioral task
behavioral31
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/test.vmp.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral32
Sample
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x86/Lib/Linux/libVMProtectSDK32.so
Resource
ubuntu2404-amd64-20240523-en
General
-
Target
VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/OSX/libVMProtectSDK.dylib
-
Size
49KB
-
MD5
e10aced290d81f4de7a47e6081dabacd
-
SHA1
1c785df3687475284320328d180ef88c35058522
-
SHA256
08844f83ce48fb0b867ab150fa026ef18f5947b47d4e66afa4f96750de07c359
-
SHA512
33a12ff1f5caf2bd6abd87e6380ab71a1fcde6c9d308e0b7fc303c532c6aff3ea3a5d924bfd54380fbb945a286a26967029283cf41ee79e96739a54d2abb923d
-
SSDEEP
768:JYsIlAGwZI3l19U1I+8Qi0RWOdQL8r+3INQyVldkFYuMAykBGSZtQ1:+sEwY0+WL
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/OSX/libVMProtectSDK.dylib\""1⤵PID:460
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/OSX/libVMProtectSDK.dylib\""1⤵PID:460
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/OSX/libVMProtectSDK.dylib"1⤵PID:460
-
/bin/zsh/bin/zsh -c "/Users/run/VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/OSX/libVMProtectSDK.dylib"2⤵PID:461
-
-
/Users/run/VMProtect-Ultimate--main/VMProtect/Users/run/VMProtect-Ultimate--main/VMProtect Ultimate/VMProtect Ultimate x64/Lib/OSX/libVMProtectSDK.dylib2⤵PID:461
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.nsurlstoraged1⤵PID:497
-
/usr/libexec/nsurlstoraged/usr/libexec/nsurlstoraged --privileged1⤵PID:497
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
54KB
MD564f469698e53d0c828b7f90acd306082
SHA1bcc041b3849e1b0b4104ffeb46002207eeac54f3
SHA256d74d0e429343f5e1b3e0b9437e048917c4343a30cff068739ea898bad8e37ffd
SHA512a8334d1304f2fbd32cfd0ca35c289a45c450746cf3be57170cbbe87b723b1910c2e950a73c1fb82de9dc5ed623166d339a05fec3d78b861a9254dc2cb51fab5f