36dd3d0ec81bde885a251d7841436a4ac4320240ad5babe334ffdfd0b2df9402

General

Target
需要EPIC平台的联机补丁 v1.10 (1).zip
Size 48.7MB
Sample260820-v9fxbsvzfv
SHA256 36dd3d0ec81bde885a251d7841436a4ac4320240ad5babe334ffdfd0b2df9402
MD5 9fd4c34bfa38151c87520ffacad75161
SHA1 a4d4dda82b2f829d3817b1f110ec8d8b5de8cf23
SHA512 e10cb8a9ab01817c2c193120b9ec6236901ac986d58e1eae43646db8b6b676d9309ea86b93278876fd4afa311a11b9a65a448f486ea8c8b04c89ccd1fb0423ea
SSDEEP 1572864:l16hke8+LWKkS+dvcVptc81Riu2d87IdOn7:lId8WxAcV5cWZ
TLSH
T148B733EA50E1C45CD5F56BBB4E34EEBB1771216677E2380C0223A8B9A0770D89F568C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery vmprotect

Malware Config

Targets

- Target
  需要EPIC平台的联机补丁 v1.10 (1).zip
- Size 48.7MB
- SHA256 36dd3d0ec81bde885a251d7841436a4ac4320240ad5babe334ffdfd0b2df9402
- MD5 9fd4c34bfa38151c87520ffacad75161
- SHA1 a4d4dda82b2f829d3817b1f110ec8d8b5de8cf23
- SHA512 e10cb8a9ab01817c2c193120b9ec6236901ac986d58e1eae43646db8b6b676d9309ea86b93278876fd4afa311a11b9a65a448f486ea8c8b04c89ccd1fb0423ea
- SSDEEP 1572864:l16hke8+LWKkS+dvcVptc81Riu2d87IdOn7:lId8WxAcV5cWZ
- TLSH
  T148B733EA50E1C45CD5F56BBB4E34EEBB1771216677E2380C0223A8B9A0770D89F568C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  DS2.exe
- Size 112.4MB
- SHA256 6ea7462b4ada96d84b8c97bcea742ef4a3996575e2d304ec9a39e52a62b7a78b
- MD5 24d20a94eb8b8e6fe6c559af20995f11
- SHA1 30e7cd96e72eaad2a40856643fe2b1c9cddc6837
- SHA512 cc7815fb3e6c689d3833af2a9db351b13569d5da950a2eea74ba78aaf620872301988727e59ea385323d3ac71bd3c9b045680d20a0e0f501f40ce9a864f606bc
- SSDEEP 393216:mwWkANqz+9O2YE0SCApwDXYdGlc2taGSzHbS+vIacIarRmruYf2VUbnKrEr5NEKV:QYuO2z9k4y+vIgamrdwaT6KGl8Y5e
- TLSH
  T1DA48AE87F3A050D9D859C1378A6BEE16E7B27550AB740BCB35948B5E1F276E02C7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  EOSSDK-Win64-Shipping.dll
- Size 17.4MB
- SHA256 b0591a96e7daa4a1031fff1fc1ff4332285e1d38d9676c33ab32d9da2ff8f765
- MD5 0d0a7f7d80bce0d3cbc5ce5e01dd23e6
- SHA1 df7410ed50b118f7ece776880409067503249ce0
- SHA512 895cb3498ca4d31f1e21f55e826d9b73b187290e7a9ab05749a96f4a78118a1b0d31d2c3b43e98603bfb65484bcd8356399e3aab67550fd7fd4caa7634281dca
- SSDEEP 196608:bLwJaWmUgoVJrJIIxRVcLCBrvfRSTfw8gAfIq62qNyoP4:48inrJIIxRV5BrvfRSTf/DfG2O8
- TLSH
  T13B07384272F40098D0BAC2BD8E27D912DB7139891B35E6CF06A0999A1F77FF559BE310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery vmprotect
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
behavioral3
- Target
  EpicFix64.dll
- Size 380KB
- SHA256 6b37f165002fb2c936721c4579989ab286d964a090d7f29d0fc8f628e6e45213
- MD5 7dbafea936672d2e2b48d76b87abb8d2
- SHA1 45151cd07731b0ab719f3b852135d1bb8c387773
- SHA512 eec1cf1c76ec440e4b6e5de0026ebe7e0c791b2bb234026f07aa53c3357e56c9a10deb5f35f429ef022355002199085bf176b52c88a38e9694fc922320beeb10
- SSDEEP 6144:/rixm55Dbr28IzlZfejGp0VkrcHEkARPxBx0JOo+qho7415MOpjTclX+qfRn9N8h:TixA2xZWA0Vkr8mZba7+qQe5hYlP/2
- TLSH
  T14D84DF06775B40B9C456C2FC88970A8AE371B8161F1157CF12E3AA3E5E377C4AE3E961
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

vmprotect
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
behavioral4
- Target
  Launcher.exe
- Size 267KB
- SHA256 633f56b78f74f0f4d613cd1c3ecbcb251e53d863e12e7ca44913d99cce6b977c
- MD5 36a283e2ce426a39afe9529ad98511f3
- SHA1 b7dc267a61164342c4e9a24aa83765f46d178cc3
- SHA512 f9f5902ddf99850eef45e9e2e40ffab901bb741c11ca12a7b4d7ea8bb13636ccc420b8f37032ee4791843378f4108bd22b39928fbec27eb7700082dff171cfe1
- SSDEEP 6144:Ce4YcSsQojxfOFqem40NSSaSnvLAOs4szs:FojxfOgzjCJs
- TLSH
  T1B3448E117491C472F4B211334A6C9F795A3DB9300B7A49DB63D40A7ECF742D2AB31BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  winmm.dll
- Size 494KB
- SHA256 cb8baaa2054a11628b96e474e1428a430c95321f8ac3b89764255cbd6628a9d6
- MD5 67c049e74d242975ffd0dcab9bc3b041
- SHA1 1f5b8e6dfa8e2132264a7dd1f66948a0948fe4c4
- SHA512 f98d04258d3f77362a023278713a30c3cd4f8013adfcea5a26a548a6f95d0786da080a8fbffde40579bd783d818fd9c4f4714decbdc34f84bb1b10e5fbd0fe28
- SSDEEP 6144:0lHx0Al1TCgUfptsdNqB9G03mKt/SI+vnYvvooI7IreqdDp8:0hx0AlYsOdKJYvvooI7uzdt8
- TLSH
  T1BEB48E19E66842B9F56BE138C9530A07E7B17849536097CF03E09BBA2F27BE0573E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

vmprotect
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
behavioral6