General
- Target zremastered.vmp.exe
- Size 13.7MB
- Sample260806-vbmbfswblc
- SHA256 9e3953ba2d80ae84bf0e73e4990caf47713f46b3e3d178640a6cb097135efa14
- MD5 03d1a4cc03c874b2c66d4e24c1f2fdbb
- SHA1 c84a2c0252993c91f1b6c71f15ec1c7899247280
- SHA512 6ba41cb228bc1734b89954c6249016b8b2fd091907155db8999e9e7e1f66752afc4b7d068cb96e63421bd60038b2f5d6280ddd29c47130e49bd8043ca7e9fd28
- SSDEEP 393216:gvrCqyPW4eEdaynw6DvjpxHqNADZ2Ye0F:wvyPW4eEdaynJCw4l0
- TLSH T1FCE623DE94D422A0E8D34A80668E1BCEB5D0754D89ED6C2D3AC31C429F35DAF664ED33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
zremastered.vmp.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
zremastered.vmp.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target zremastered.vmp.exe
- Size 13.7MB
- SHA256 9e3953ba2d80ae84bf0e73e4990caf47713f46b3e3d178640a6cb097135efa14
- MD5 03d1a4cc03c874b2c66d4e24c1f2fdbb
- SHA1 c84a2c0252993c91f1b6c71f15ec1c7899247280
- SHA512 6ba41cb228bc1734b89954c6249016b8b2fd091907155db8999e9e7e1f66752afc4b7d068cb96e63421bd60038b2f5d6280ddd29c47130e49bd8043ca7e9fd28
- SSDEEP 393216:gvrCqyPW4eEdaynw6DvjpxHqNADZ2Ye0F:wvyPW4eEdaynJCw4l0
- TLSH T1FCE623DE94D422A0E8D34A80668E1BCEB5D0754D89ED6C2D3AC31C429F35DAF664ED33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.