General
- Target _Getintopc.com_VMProtect_ULTIMATE_3.5.0_Build_1213.rar
- Size 39.6MB
- Sample260416-lezxaae14t
- SHA256 71ca87bb1f9fab55b6e931fa33117d6b83e05b8135ccfc73dc75bd7eed8a3469
Score
7/10
Malware Config
Targets
-
- Target _Getintopc.com_VMProtect_ULTIMATE_3.5.0_Build_1213.rar
- Size 39.6MB
- SHA256 71ca87bb1f9fab55b6e931fa33117d6b83e05b8135ccfc73dc75bd7eed8a3469
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
VMProtect packed file
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.