General

  • Target
    VGC Emulator + Popup.exe
  • Size 47.4MB
  • Sample260722-nxys2szzhs
  • SHA256 97b88b1996f4b31336f5f043a2254645df454a1359d465630e77dd8f315161d9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      VGC Emulator + Popup.exe
    • Size 47.4MB
    • SHA256 97b88b1996f4b31336f5f043a2254645df454a1359d465630e77dd8f315161d9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target
      main.pyc
    • Size 17KB
    • SHA256 cdd261ae6633d789918e3bcba875106e9ab11c1a4cf428586e6bef7a5c40a115
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks