General

  • Target

    https://logicalrl.com/

  • Sample

    250328-yrfqdssmt4

Malware Config

Targets

    • Target

      https://logicalrl.com/

    • Downloads MZ/PE file

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks