6a4d6336a210575b315c6a65e610f80bf53c25c251d30cf4c72af8852a1861ba

Sharing

Copy URL Twitter E-mail

General

Target
VMProtect 3.9.6.rar
Size 36.8MB
Sample260622-pec93abx9k
SHA256 6a4d6336a210575b315c6a65e610f80bf53c25c251d30cf4c72af8852a1861ba
MD5 ecc50363ba971f574bab2b6e35a88cd8
SHA1 d1960fdac91e484c93f5e73970fef57ca04aaf02
SHA512 5f2292fa956ac2e0108b90f52264a672a6f76b1641a0b342c34d89b65879950696e798838cf207fdb3c7db18a12c4cf99b42c68068242e3e0602a1fa5cc474a0
SSDEEP 786432:bhjiuIfl4w+iROuS5zYcKyL9NAh51ea1DJy02BJMEQB60:1ji1lznS5zsy4h58Ab2Y/o0
TLSH
T1208733C23A3BB87E84F321D49D51EE22D75234920772BD3A7546E7C421A2BCB87D254B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  VMProtect 3.9.6/Lib/Linux/libVMProtectARM64.so
- Size 38KB
- SHA256 00aecc09e863c526c691b8b5c2fbb513a8f48b763fd18225015318a756e32656
- MD5 57a740a420b55397b7facc447995a73a
- SHA1 49e3e7b24ec32aff2004e4087e2e3bf5b3e53f86
- SHA512 d11fc0fbc04dd466ab6ae6d14ca49f52f0bd09b126f0313a11a7548c77e77b2b197594549ede836d8a6114a47576da932cb2f08a381da94241b398d79676bee8
- SSDEEP 768:aDECFjDjCiM0e8AJ5+IsZ2eLORxrz+4CAbdP2QW1:W/jDjzTAJ5+tZHqfEAbdeP
- TLSH
  T1B903B706EB80EE2FC4DD5374656B4F6413318018939FE757A12502956E933CEAFAE2CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral1
- Target
  VMProtect 3.9.6/Lib/Linux/libVMProtectSDK32.so
- Size 32KB
- SHA256 7e73d0a80d90db432a87e6daf075ad2add7cead3918c6025094fa8df8ade7f0c
- MD5 1e619078dd43b175f220e37b9ed824c5
- SHA1 f915a98d0a7134694a2de1efe244135ff909fc7c
- SHA512 be6eeb90cd18bc0d097293f94be631714b4985420dd21be5e703efdfbe8c427a4c2d650557a1508b53683d5bc053c677a3dd08d03a326ac64cb1ea017e2fe8e0
- SSDEEP 768:1q6qsfBcgboedwWi4W1TDzRW/tX17g3VMx:IsWgbobJv1DRW/aC
- TLSH
  T1F7E21947AF84A93AC4C60575126BCF191336C0724EB2CF53B62847645E933CDAEA728F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral2
- Target
  VMProtect 3.9.6/Lib/Linux/libVMProtectSDK64.so
- Size 38KB
- SHA256 5bd072d40820b70383a059bb0a8ace695fcb3e526a643dd21d0528b5b9b0f5e4
- MD5 7fb8f3b45b0432477f5fd1e21a8c1673
- SHA1 531691a33c1ee41d31c4bffcc7a66172c02bab62
- SHA512 fff085406ad2b0f858bad3a7c546c621cff91252a169e44ebf91af9ab62586a352894c5cedb402dad21044fbccae4fa0d26d3f8209c987fca68a64f7c50dd311
- SSDEEP 384:luE6TFC8ojUq3MUibTD4LO3U9f3sXVTbpgK+gxo/A4/o3i3tbzMRaOdm2xN:lL6TapAD4LOsJKFob/Ai3tbaaEvN
- TLSH
  T12F031A47AF84EE3FC4ED4371A55BCF5C1330A05087A6D71B221482A42F577CD6EAA28B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3
- Target
  VMProtect 3.9.6/Lib/Net/VMProtect.SDK.dll
- Size 10KB
- SHA256 774ac5f0e7f795ba41cf4ff3ce09e3a2670b862831083778a4140894e4f1d125
- MD5 396ac889c048603a575d05541f1c1311
- SHA1 061834b997aaf5c3e629e0a0fb9afb099f15f2a7
- SHA512 d55198bdcf80ea29c850c9f12c911bf81f44510874678293ac921601e457c9d060011d780881bb3a6108d5a754f519ab270bf02628bdb1ed63092d49873b03b9
- SSDEEP 96:SbeBWY8lNW5lleUWbgjaJvbdI8cH4YJNSscbNVOz8RpFxrPOPXCr3c7+AsLtFSVF:EY8zWUUOgjSjR+JxzwFxrxA88
- TLSH
  T10F22B712B3E8A156F5FB67356D7211310BB7BA994A72CE3F148C010F0B37A546BA0B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  VMProtect 3.9.6/Lib/OSX/libVMProtectSDK.dylib
- Size 118KB
- SHA256 d335780968e5e8742ebd8f748fb2ec372c4f1a5922cfc0fd64c15dc8921be41f
- MD5 4250f8ab6e2f6594779a511c69964a22
- SHA1 fb86ba0a222a1f382a62822e966fc44607560d33
- SHA512 9c9b13d974f1e38a587ea1b0fd761b91a2cc69b26e752b0102ee11c97cf9a8945f8bebc07966b42b86b1ab407373abf9b048a046365a5bff7b1272869292be17
- SSDEEP 768:gC3w0MnwZI1l1d4x02QsiURWO9aSIlpJ73IKaQfF19YR0WwMykBGetF5+ss24d6u:VKnwUhz38y24dpt
- TLSH
  T145C3F917EB05A427CA8D90F4929FCF6AB035F16011B7C763B661D1682FA67883E5680B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5
- Target
  VMProtect 3.9.6/Lib/Windows/VMProtectARM64.dll
- Size 113KB
- SHA256 95c36dbc84fde8674c4d47c68f2a0a575e92ba136fb54100bb14ec680cabad8d
- MD5 18d63414f1f53d12cc74287106e40e7b
- SHA1 96abc1e430d9fa4b8e7c0bc230b5ad63d44253ad
- SHA512 a376bce05866cf84f1e656d379e75fcf9ad7dd4910a5667b44d5441f10885625674c0c07b307abcd89d86182efca14b305fcb565945995a57d3066f118d60aa4
- SSDEEP 1536:XBUJ1mU+JN4aJK0gHLhAJoei31yskAT+CRQJTv7sWv0dPgy:XBUv6N7K0+h4G5k1TleP9
- TLSH
  T1A4B35C53B78D2807E1E2DB38F8574F50633FB97484248E4AB202425CDD97BC99F769A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  VMProtect 3.9.6/Lib/Windows/VMProtectDDK32.sys
- Size 3KB
- SHA256 5ba9aef8e17fd89a3a70e767878f099a9ed6d96b7fd83459864334cbbf401e7f
- MD5 941f10363ef51c84a3076414d9430844
- SHA1 b8724661b462a7df052a2c392cb7e18662162227
- SHA512 35508e8a74a36ce6f7ee73cc1129c97ba42f8aec219ac20243f043a157c0744351a711bfd2ac6956b8fb88a8bc219ab7768f1912446072522dee4901add17009
- TLSH
  T15D5177068951763FD0DA81F93B66CC263438410153F6C3D7972107256B813DF3A3958B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/BCB/VMProtectSDK32.dll
- Size 98KB
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH
  T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/Delphi/Project1.exe
- Size 887KB
- SHA256 a14c1e75ce36821ecd80e4525c888c9d58e80a23a8a5f6ebe9923f6a33d93e7d
- MD5 fcdd67939f856f8bcfc404bb5f706ec7
- SHA1 758d14e6d838e12d2c1e52f65594a91dbe744f4b
- SHA512 18be594c08513e005840d9af00174edb021fda635e5331528310f72fcfce20938edef99965ccf0039ec0283500239642bb6ff6809ef797c79f6c4c5ba1a6aff2
- SSDEEP 24576:FiRfWQHP2VPwHgzDe/EMdwBmSPk96vBL/5YSnrnS:AWHPISVZ9YSrnS
- TLSH
  T151156C13B392173FC136163AC96792A05C3B7A102E965856DFF4CD8C1FF92A12C3AA57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/Delphi/VMProtectSDK32.dll
- Size 98KB
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH
  T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/Project1
- Size 355KB
- SHA256 d1951f724d2aa423bb2c29eae92069b676b33a7d0e9d371a45e1d942c4a28a8d
- MD5 0f748d65e665cb249408a25694f1c016
- SHA1 c31e8b9ef31986ccc0ea19abf337d3fe7b82f479
- SHA512 2da9405d516aee9a9bdd8372013ad4b1dbc4f7b031703673b684e97194f4a1e1c5afa1c2bb84e5c339f839dd4ad71caaa60604742908d1ae74f729f1b5d5736b
- SSDEEP 6144:oRy5S3+kZrUHMNsP96a2FAtzojOGV2Spqjj/Ig7t/H9WIBR8PEZIPCJRK:oRy5S9ZrUHMNY9sFAtcaG8jV5/RBR8PP
- TLSH
  T1FC743919FE43917FCA2340F982774A5A9B319135203096A7B7D8DE3DBE79D82B42CB05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/Project1.exe
- Size 77KB
- SHA256 afda096738c0646e01a2b3d2c000fe48b80376ce8464be660764ed2004ba5de3
- MD5 e524da8fbf47a18fbae7ba94943eb451
- SHA1 3aae8e31b4f7f14cd607b48291546d1a3233aff2
- SHA512 c0641d9f1a1778095bfbd6463bc35caeaa3d3bb7cc4350d3853b40c7d72ef13e969ec4627319e25d05bf22cc83443010b45153721118261ba2b3c12634e078f4
- SSDEEP 768:aivdTUc6NCnV/mfVKo6fuTy005j5y29zwB8p5UzNve9a+ZxeN/X3GRsYjY2zgy0p:JnwfH0uGV5MNy0l/vv
- TLSH
  T105734D92FBC187BDCA465EB54B06C1A7A720F2313C35C16B72D80B2F96FA0D2557A781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/VMProtectSDK32.dll
- Size 98KB
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH
  T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/libVMProtectSDK.dylib
- Size 49KB
- SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
- MD5 df2b9db64b5d9f268303a44f1b7526da
- SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
- SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
- SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
- TLSH
  T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral14
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/makeit.bat
- Size 104B
- SHA256 2062ace492beeb520c23bc3617c66af0b3b822ad3c6c1baf4e6883ad0a7f879f
- MD5 7c59610d2f4611980913211ad36375af
- SHA1 ca86a95bf4bf72407f6ab2a15933402a451036c6
- SHA512 c41a265d9713807c3a1abe1d9c7b66de70d27ed847b7cd5e3d1eb1edb972b3d3bfc47f9f570db15864db55ad315a5bc60b1c599a69289a70c7368cf4e7a813bc
- TLSH
  T146B012052D0D63C0FDCFCF6D887788405192F26F827083DA2511E2282D11380047899F
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/makeit.sh
- Size 70B
- SHA256 1fb56c36d9d46a8cdad55d79839b9ac59a86d15df518800208957afb8a51efe4
- MD5 49f4fda335793090271c10668c2da780
- SHA1 e851f9b0d4bf6bbc5a8269cbe6d99938fbc271b7
- SHA512 29e5ef7618375c8284ca217642b9ede6d57a273882fcacefa39104603778124512ee8e82220326db5fb00ae614f07ed20549bbaca9019d271dfde28172d11243
- TLSH
  T147A002442B88BB017BDEA710D156DE64F257355C6F228D7C10C9D29D24133819056597
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral16
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/GCC/Project1
- Size 8KB
- SHA256 6bd7626d74b11df5a7b7b49b1a7a08ebe6f21b870c4493d50d53eba8036b879e
- MD5 d9a7d8095dc2e48c9827a498debb9d9a
- SHA1 ee7931c457468adb3cafd8f31b70753ff217174e
- SHA512 2ec7468348f93c93a859bef5188e32377644c2fe411d5feea260f9c44590545935c1728e263bc1c06a2ed8457951bb03f1d7e3a40103d73be0585b3437f94b68
- SSDEEP 48:xH35L/ifdnpgS4zgFjf1j7hQvTc1IkjaFET:xH3M0kFjff1njaq
- TLSH
  T16B02CE42A79C0A26D01CC778C0DA4FC6B261F5510EA69B0B1681D21C1F5B78E6975F4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/MASM/Project1.exe
- Size 3KB
- SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
- MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
- SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
- SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
- TLSH
  T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral18
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/MASM/VMProtectSDK32.dll
- Size 98KB
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH
  T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/MASM/VMProtectSDK64.dll
- Size 116KB
- SHA256 db095510f12ce0e3bc41c6dcc9e91751174e4eb7a0533961f63fef024789f9b1
- MD5 db4f1a1406d292162a3b99d1fbb74822
- SHA1 a9f3b4cfa0347b4f067d303fa7e9f0905b9f5838
- SHA512 dcf4ca867c88ee6b74d52cfe3a66439f538f750b1fd11c6708d003396cb5cd4548271ccef8dca74b078c331b4da7b9d46ab6cdc63a5da9524e9ffc921eeea6c0
- SSDEEP 3072:qmcqYHq7Aiytzg2ScpvgJcG5sqYX6U3H6lBS:n0Hq7AiyegZgJZSX/aH
- TLSH
  T131C36C57B3E540BBE1B6C679C8634A55D3B678150B24DBAF07A402162F233D18E3AF72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/MASM/makeit.bat
- Size 1KB
- SHA256 655f241e2cfa322de729c415b5c9c23103b240fdc51787155bf68f1dce39b3ce
- MD5 af26b0b102187a1d8e57e5f65ad6286e
- SHA1 40ccf43c0a7589e4d9c263cdf8952779ad77a4b5
- SHA512 66d67b277942995ad9d6397590191519412a47e6e16db5f3bf88c9b280f03febe762af19c5f02cf392d4b07e006eb5a946f25d6d4801e6d82475a4b5fe488bd9
- TLSH
  T1A6319E56AC5EC2A6BFF4C44AAE1C4542F3031296657D2635F0FA98F7A801391373D50A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/MSVC/bin/Project1.exe
- Size 35KB
- SHA256 5295cf2336ba6f0f91039aece6aa2a3d3a613887db30200524fedbd2d0099168
- MD5 70c2135f72e3c93411699807852a6749
- SHA1 460f2e2e42e1ac7adcf1837c8b18ca30cb5cedbb
- SHA512 eb0b9673fc3c506ea2e25eb02896ba9346506fbeda30b0965efc8d4e733b4bed9d90b275fd4739b2671ad5973c6e40743be477ee0ade13a4737e2d3812fce6b7
- SSDEEP 768:hWyWgCiQvDJ8Eh3Ovopls9wUED0XnDzm8yXBC:IyhQvFP36Kls9Ox
- TLSH
  T159F24B1175D38432E1A2693518B1D1B19A7F3D4327B1819F3B8812BE5FB17C19EB83AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/MinGW/VMProtectSDK32.dll
- Size 98KB
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH
  T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/MinGW/makeit.bat
- Size 154B
- SHA256 8202e0c42afdab926173409d347f6683dcc6e24eb0fc8cafdcbec1d267f1a59b
- MD5 76377449a9a7fa8406a77ba802bcb6ef
- SHA1 6ef86e3599e85c6e69aa4e74834d5bad4265d5e4
- SHA512 6e018e97a20070b5e7197cc4309fbaa8c6d7aa5b71c3450c5b66ac73205e1bd7969b15db1ebe6a74e4549213bc28d0fdfd44ce09f6aa642d88c0ba22a97f808d
- TLSH
  T106C08C6B1628D135F1B07AC320914AA0E0A201288872243CF86E80E533E83020B2BD27
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral24
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/Net/Form1.resx
- Size 5KB
- SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
- MD5 4eb5913a0e5aa842250f7419538fa230
- SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
- SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
- TLSH
  T149C11245B1C1DD260FB3482DE6523988FBA8923F02356C50B4DCA61F5F72985A6B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/Net/bin/Project1.exe
- Size 7KB
- SHA256 70d72b35874fbf4f06d9899e9fa90fb7db292e8c41dbe5747c22a40ee9053ca7
- MD5 a2fe9367cd01c04ef07c9bf42e35954c
- SHA1 ae98a732f77ef44a8249b3160f57ba95c7189375
- SHA512 ab0f282da62b3288e2258d48dd21b88ea977580085fcc12e8e5c975c09fa542fc5987897d7cadc829e85fd9b8a55870d9a7296e83b167fd95944869f4d0f6b27
- SSDEEP 96:LbvvBrt7hdwFGl5PSuzvCtjDarh6TCMBhlXWNeMzNt:Lbrh2GCMvojAh6TCMBh9WI2
- TLSH
  T191F1D718B3E48273ECB70B729DE37E800B79F6116CA3C79E5886258F6D637014512753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/Net/bin/VMProtect.SDK.dll
- Size 10KB
- SHA256 b560d162c060b9ce441a8ab9a4ae9d4e0a8121145bf443789c2d978e5f645f75
- MD5 fb3f3c72e482cd1014dc0b6daf857421
- SHA1 1dc14bc418aa4985dc2cf1621d7cb7c6409da0c5
- SHA512 72f55b33826c75aca5dfb0b991722e83dd910cf36d6199159bcd5bcee078dfc407ee16f0855fd3274b6829a39b37ca722c45dcc28f3994b44543b602e5bf2d87
- SSDEEP 96:XbeBWY8lNW5lleAWbgjaJvbdI8cH4YJDcbNVOz8RpFxrPOPXCr3c7isLtKMHAUYu:ZY8zWUAOgjSjR+JdzwFxrhfMHDn
- TLSH
  T1A822A712B3E8A15AF5FB6731AD72113107B7BA594A76CE3F148D010F0B37A546BA0B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/VB6/Form1.frm
- Size 1KB
- SHA256 b2f7ff7c5401d42629534f0bbf6af590012ffe1fc01f1ef17fb5cbe104985a50
- MD5 5bbe74c4f2621b85f74ed8d4e1620c6e
- SHA1 8517c3c792c7d1536c07c3f207a0f90e534cc398
- SHA512 946028f8f886c4fd941d62bf276ef0820da0acf19c8d51d770b154d87a427d1a117cda383b5ead3a19c6478311c9cc979402f89e19435083409df254245f9851
- TLSH
  T12B31674059CBE2306877C2948C27AE08F9E1266315571C22764E91CD0FF767E93FE766
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral28
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/VB6/Project1.exe
- Size 20KB
- SHA256 3022f931ab6972d42171da9994d4d01e6031e72ad632a59e66d058999a5cb546
- MD5 a76b5af5f70dccb3d21fa40d3084858d
- SHA1 ad42a6581d6f348c7c5f9ff6867eaf95107bee57
- SHA512 1ff0f58b9d65aaf0068a854a679423c1896112c4005d22776007f61c5aac841d2c0f3bc1b4754927f52ad95d8f320c5a845b779e9190c7de498489e76778a700
- SSDEEP 96:P4zZGj57YNbJh/PA+1AzUxjT7DTNsRJ+nsYjkjLK9wjPTtYDSLtdgGDD2+xuUI2:rSNbH/PA+3/Nfsoy+9wDTi6tdFD2AI
- TLSH
  T13D926453F5582A32FA8587714D33CBAE2A637C302D61CD2B39453B1E1D74A425EE361B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/VB6/VMProtectSDK32.dll
- Size 98KB
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH
  T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/MacOS/Project1
- Size 55KB
- SHA256 0a43b7994826517144e8966a9891b3cc79d6f7cfc49fd1bd6455457b5dd28f7a
- MD5 03cd91ac4295936399e7cdd94cd90ebf
- SHA1 60a032b1d53a161f5cbf751fd4dffd2f4d226c35
- SHA512 774eb2236f7d77af52681b970f84827793d482a33a181549d17e618a5d5c9a443cbbd22cc9b8ec64a494936ea250c5f2ad02a3e2e2add4cb113a6af81118919c
- SSDEEP 768:wvOMf6zurtmdbJ7i7vUtvOZAKEIIeI/I8IRR6THELmZ:wvOc6z0mdIcOZDFEzZ
- TLSH
  T14243E88BBB508447C58B0039C42ECB18E129F76DCF51B2D76AE9DA9D4FA0A435F4271B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/MacOS/libVMProtectSDK.dylib
- Size 49KB
- SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
- MD5 df2b9db64b5d9f268303a44f1b7526da
- SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
- SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
- SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
- TLSH
  T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32