General
- Target VMProtect Lite 3.10.4 Build [email protected]
- Size 37.0MB
- Sample260627-valzasct8k
- SHA256 967df00b0c2799cd3443625bd137fe390df9520664c7cc7be819dcfeee1d5445
- MD5 e890222b251f5b518748b6b257e1e8cd
- SHA1 a9c0b4ec62b5bd2dc233ec4b236ef208b7947a5e
- SHA512 402e7355048bd7a72fc44f187ab6039a0bf3d7f4e2809ed64ccb060e282c62acdefdadaa593b2fb285e493f1471963c3c5e5977e843b5138f2266abfe202c2bd
- SSDEEP 786432:Ek0TFHkLjL5Kn0OFRPJXgXKEDox6GhrfcHsbN/uZjLfdiET1dlMfGzfXMXcxF:EJZHk75KnR2XVUx64rfcQOLj1dlR8Xcz
- TLSH T143873369C5DA950FDEC822FA2708EF5ABE8EB74D31F5C0D72E895D4406A63F9806C407
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
VMProtect Lite 3.10.4 Build [email protected]
Resource
win11-20260513-en
19 signatures
300 seconds
Malware Config
Targets
-
- Target VMProtect Lite 3.10.4 Build [email protected]
- Size 37.0MB
- SHA256 967df00b0c2799cd3443625bd137fe390df9520664c7cc7be819dcfeee1d5445
- MD5 e890222b251f5b518748b6b257e1e8cd
- SHA1 a9c0b4ec62b5bd2dc233ec4b236ef208b7947a5e
- SHA512 402e7355048bd7a72fc44f187ab6039a0bf3d7f4e2809ed64ccb060e282c62acdefdadaa593b2fb285e493f1471963c3c5e5977e843b5138f2266abfe202c2bd
- SSDEEP 786432:Ek0TFHkLjL5Kn0OFRPJXgXKEDox6GhrfcHsbN/uZjLfdiET1dlMfGzfXMXcxF:EJZHk75KnR2XVUx64rfcQOLj1dlR8Xcz
- TLSH T143873369C5DA950FDEC822FA2708EF5ABE8EB74D31F5C0D72E895D4406A63F9806C407
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Downloads MZ/PE file
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Suspicious use of NtSetInformationThreadHideFromDebugger