General
- Target VMProtect Ultimate Build 3.8.5.1887.rar
- Size 133.4MB
- Sample260819-1ea1gstfpb
- SHA256 c140f48e0146bc0b9d476cbf3f01100b2d156108a854d6c59b666d990c8eaa17
- MD5 4b6965e144354783ae36740b76dbbf20
- SHA1 11c74c8f336eb9db95f88522d01ab5a72b5f385e
- SHA512 02f07e41be35453e8cf3f6634c61805e6152dc27f67eeca3d1add019c10692ce30f2f28516aa06d5008de5a825d98a46b4710e2381838e6d52b27af70c7cd496
- SSDEEP 3145728:X1+18tR9mbbQEGkiksdT2qpzIfb67iUtgOawuYz5IhPhkt2:geTO7q6qp0kWO0Yz8Phkt2
- TLSH T1EA6833B62F8B45B2D2F5AC7D31D8542978A730358CF95A0CDC32D55C84BC9A3783B8A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
VMProtect Ultimate Build 3.8.5.1887/VMProtect Ultimate 3.8.8.2040.exe
Resource
win11ltsc2024-20260709-en
5 signatures
300 seconds
Behavioral task
behavioral2
Sample
VMProtect Ultimate Build 3.8.5.1887/VMProtect.exe
Resource
win11ltsc2024-20260709-en
9 signatures
300 seconds
Malware Config
Targets
-
- Target VMProtect Ultimate Build 3.8.5.1887/VMProtect Ultimate 3.8.8.2040.exe
- Size 98.8MB
- SHA256 373ced05cd9969305e91c6f5b3ca6c78b528e4c49a55dc541c2d24987998ae27
- MD5 88b51fa79d093fbe131389e0dfb73dfe
- SHA1 020c6d9f767b6e0d88dc581fdbb626f8a4054086
- SHA512 b9a57b5a9a14a6cfb11560c0bf2b0251536655df0e63ed65c2b98522dd9ec77a0981dbd3153d58e26ebc1a9afc430dac93672169e4cd01d3bc9eda56e4c10ece
- SSDEEP 3145728:c1+18tR9mbbQEGkiksdT2qpzIfb67iUtgOaB:xeTO7q6qp0kWOU
- TLSH T1683833A93F8B82B1C2F6AC7A34911515BCE374728DF25A5C9D31D91C843D963BD3B8A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target VMProtect Ultimate Build 3.8.5.1887/VMProtect.exe
- Size 35.1MB
- SHA256 91881d3ba8eeb6cab2bd15b670617e10ac01bae42b45aa30da4d60b75e3a99c4
- MD5 42bc64a5b81dde66989bbdd4bb460b9f
- SHA1 a5a16491477e0ace4ee44a354a15ba63e55375e8
- SHA512 d8f772cf829e7245b6fa53b32bef68e414505bbe8b3f23b646053828abfd42797d4be5eb2c9b209f212ebc8536a1bff3a37726fe74ae4607bef96577a408f2dc
- SSDEEP 786432:js1qgvftkNGCDvdJrObjfho/qNn4VJHF0yHQcLEP7qAuHG:aqcf6fvEo/qJ4VJHxnPm
- TLSH T1998723DF8DB1C755C84645B2790602C6358ADCCEC4EE491419CABC223E73C7B4EAE6B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger