General
- Target 1893523f2a4d4e7905f1b688c5a81b069f06b3c3d8c0ff9d16620468d117edbb
- Size 191KB
- Sample260303-jv2ppsg19e
- SHA256 1893523f2a4d4e7905f1b688c5a81b069f06b3c3d8c0ff9d16620468d117edbb
- MD5 3c7316012cba3bbfa8a95d7277cda873
- SHA1 d6a57b9aaa20fe4f3330f5979979081af09a4232
- SHA512 fd64487d81827b43d6529a4c60bf407a5c8d637f0572ee69683f190414d4d68a2f8e39b046a6893b8899fd2e6a76bfd2673032ef4c59319935830607ffe85fce
- SSDEEP 3072:r58eFcfsGa/nxv1ekqQgR3KWF0OM+MRq8IufDkeQzSYWRNcomBEceSXCp:9EKd1ek6RlF0NWuYnQRNciceSXCp
- TLSH T16914BF5B72B030FDE1778239C8A11A15E772B8311B619BAF1364475A2F272D19C3EF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1893523f2a4d4e7905f1b688c5a81b069f06b3c3d8c0ff9d16620468d117edbb.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1893523f2a4d4e7905f1b688c5a81b069f06b3c3d8c0ff9d16620468d117edbb.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 1893523f2a4d4e7905f1b688c5a81b069f06b3c3d8c0ff9d16620468d117edbb
- Size 191KB
- SHA256 1893523f2a4d4e7905f1b688c5a81b069f06b3c3d8c0ff9d16620468d117edbb
- MD5 3c7316012cba3bbfa8a95d7277cda873
- SHA1 d6a57b9aaa20fe4f3330f5979979081af09a4232
- SHA512 fd64487d81827b43d6529a4c60bf407a5c8d637f0572ee69683f190414d4d68a2f8e39b046a6893b8899fd2e6a76bfd2673032ef4c59319935830607ffe85fce
- SSDEEP 3072:r58eFcfsGa/nxv1ekqQgR3KWF0OM+MRq8IufDkeQzSYWRNcomBEceSXCp:9EKd1ek6RlF0NWuYnQRNciceSXCp
- TLSH T16914BF5B72B030FDE1778239C8A11A15E772B8311B619BAF1364475A2F272D19C3EF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects VirtualGate payload
-
VirtualGate
VirtualGate is a Windows-based backdoor deployed within guest virtual machines hosted on compromised VMware ESXi servers.
-
Virtualgate family