6a5e24fb3ca2688df4c8f6871927f888aaca77fb92fe7c683de41ba78deba65b | Triage™

Login
Reports

Overview

overview

5

Static

static

3

VMProtect.exe

windows11-21h2-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
VMProtect.exe
Size 36.5MB
Sample260805-jrhgnascqe
SHA256 6a5e24fb3ca2688df4c8f6871927f888aaca77fb92fe7c683de41ba78deba65b
MD5 24576e5e2b8fd1f0b72eb12fa3cb7f3b
SHA1 a26a658bab9a87c17815e542002f373d2833130c
SHA512 99c93d6b630107cb4bcdd7bde5e738d37c46eea7ce261d965afb4257e469d59683d11c1e2a3821966f1c5ee4c4b7d2d795d6c104897f9c7daa8443ab83b61719
SSDEEP 786432:z7/NadqAxJMBWv/WO7egcpjM6TyfKaUzwZCy0FhHA:z71adqyJrvbSRwCnh
TLSH
T1C087234A5D998B98C0CF9775224B07CD11E5EDC980EA051D3BCA3C03AE76E6B8D5D2B3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

adware spyware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

VMProtect.exe

Resource

win11-20260513-en

windows11-21h2-x64

10 signatures

300 seconds

Malware Config

Targets

- Target
  VMProtect.exe
- Size 36.5MB
- SHA256 6a5e24fb3ca2688df4c8f6871927f888aaca77fb92fe7c683de41ba78deba65b
- MD5 24576e5e2b8fd1f0b72eb12fa3cb7f3b
- SHA1 a26a658bab9a87c17815e542002f373d2833130c
- SHA512 99c93d6b630107cb4bcdd7bde5e738d37c46eea7ce261d965afb4257e469d59683d11c1e2a3821966f1c5ee4c4b7d2d795d6c104897f9c7daa8443ab83b61719
- SSDEEP 786432:z7/NadqAxJMBWv/WO7egcpjM6TyfKaUzwZCy0FhHA:z71adqyJrvbSRwCnh
- TLSH
  T1C087234A5D998B98C0CF9775224B07CD11E5EDC980EA051D3BCA3C03AE76E6B8D5D2B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

adware spyware
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

© 2018-2026

Terms | Privacy