General

  • Target
    UN.vmp.exe
  • Size 4.8MB
  • Sample260728-ejmdeseg96
  • SHA256 a38d39879c54266de4361c4368849c32038b1f1d5ab8dcbe5bfd59f6d3973dd8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      UN.vmp.exe
    • Size 4.8MB
    • SHA256 a38d39879c54266de4361c4368849c32038b1f1d5ab8dcbe5bfd59f6d3973dd8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Stops running service(s)

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks