ca70a7da1fb07c687a428696587cea77c6b623a709c8ab2364aa8b3e816124f7

Resubmissions

21/08/2026, 17:07

260821-vm5beax1et3

21/08/2026, 17:05

260821-vl64lstgqe3

Sharing

Copy URL Twitter E-mail

General

Target
VMProtect Lite v3.10.4 Build 2668.zip
Size 36.9MB
Sample260821-vm5beax1et
SHA256 ca70a7da1fb07c687a428696587cea77c6b623a709c8ab2364aa8b3e816124f7
MD5 98188a40e9f98bfb8dcc7c2975c76f34
SHA1 33a977625228aa89131b3e60a9175ed4c3c11fae
SHA512 fda108f6677fc99f98018b5d8dbb874ab10620e228a440f4c3e1ec9f44d2e410b4acdfcef32c7162b87b08b271a45393e80f90fcd7cf4a054e261c8b0c91712e
SSDEEP 786432:HlFHW7mrv1OJX1iY/oJkAnFHIR3h3deb7jDXSU9RFLAzINsNBChCvporBi:FFHE2dOJX1zAJkeFHMjcjLRFLqzChYoI
TLSH
T1EB873380FA47814BFE92667C2500FB456F1BB64C2BFDD4A36E092BC299E57BC800559F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  VMProtect Lite v3.10.4 Build 2668.zip
- Size 36.9MB
- SHA256 ca70a7da1fb07c687a428696587cea77c6b623a709c8ab2364aa8b3e816124f7
- MD5 98188a40e9f98bfb8dcc7c2975c76f34
- SHA1 33a977625228aa89131b3e60a9175ed4c3c11fae
- SHA512 fda108f6677fc99f98018b5d8dbb874ab10620e228a440f4c3e1ec9f44d2e410b4acdfcef32c7162b87b08b271a45393e80f90fcd7cf4a054e261c8b0c91712e
- SSDEEP 786432:HlFHW7mrv1OJX1iY/oJkAnFHIR3h3deb7jDXSU9RFLAzINsNBChCvporBi:FFHE2dOJX1zAJkeFHMjcjLRFLqzChYoI
- TLSH
  T1EB873380FA47814BFE92667C2500FB456F1BB64C2BFDD4A36E092BC299E57BC800559F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  VMProtect/Licensing/VB6/TestApp.vbw
- Size 87B
- SHA256 d696bd96ac86ddb3c7fc797cd6281e1372684e18a9c5efc632f480e961ff29ae
- MD5 fa8b8c8a0e9b5a0fd46efa4b69e381c6
- SHA1 630f94eb8e8007f3b2c9483c533df100f22ca60f
- SHA512 246307499a1373ea736f0472b5e4c00fdd5630073b50ee0620d2347e07617a7898140051d80301562b053bce093f2cbda523985396a898754535890efbb06c24
- TLSH
  T127B0129A024F14170B026B43414348058C84B05C002C44804B992093011164348C4282
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  VMProtect/Licensing/VB6/VMProtectSDK.bas
- Size 3KB
- SHA256 d2c1334fd893071b3b7e42d0817cbd37310c831af2af12ee1f94e8f654eff403
- MD5 30d0ac58f09ba02d81dde6ea9067b582
- SHA1 b97c402bb5e423d7e2bdc438bcfc4024b1d6a7d4
- SHA512 b06e099b109506716ce8d9c25f58d3af2b870510c1f3bc33c5d5cb5a356c626285e2b4e6503cebb5b4dd0276007552416b412854b115c01d9c6e795482d48ce2
- TLSH
  T1EC814999E6147C7AC8A5A1E83027DCEBBCEC529535B9D393603062CF0FA28CC67D4167
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  VMProtect/Licensing/VB6/VMProtectSDK32.dll
- Size 98KB
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH
  T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  VMProtect/Licensing/Xcode/AppDelegate.h
- Size 259B
- SHA256 c3ded7a53d22e7f856ca953a2c6c4a6d20e92b0ca9818266e0eac6332fe90b28
- MD5 db05fe095b3cd92c813c1b446eca335b
- SHA1 79e356204363c409fe8b2fcbbb8c9cf0430b8e70
- SHA512 7769c22c8eec8f7f46e5eca277f49aff3d12c334fae358c03ab9a4f7cd3adbbe59f3168c212052e6fe258952490512957713331ce1db8d168bd4a41ea01c3bc0
- TLSH
  T104D05B8CFF49D43756D0014571212651F64A20042DE191CB37D55E53EC59077C69D776
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  VMProtect/Licensing/Xcode/AppDelegate.mm
- Size 2KB
- SHA256 276ac62ea36d5cc429c661dacf45ad7992338876884b1b0e05e6e98b3bf2ecab
- MD5 1be8bd9ff451f5a427eb128c96945422
- SHA1 66b9f4b936a62d06350e2f1bf6c357205ce5cfcf
- SHA512 24aeb0df3df0106238b1d091c8c8c172cc8fb3225cb6a6dee01310d79b518625fb38625504ef95c012a3c9a3f70be599a3e4fb3cda28c24eef882cdc69a4fc66
- TLSH
  T1D05154DF3422609EABE222D2927A549C2DF5B12057B390F5B8D60258305610DB2BC3EB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app.vmp
- Size 2KB
- SHA256 74e8fba8ae5af3fdf0d362a004b0ef0a67244713c46418984fce974a840d2083
- MD5 7f0d84edd3328d30fc22f13dbaaff0a3
- SHA1 bf1879ff48f27f953f3b33bc798dd04f5489c7df
- SHA512 76bf5f495a6c42bf0ebff2421771e28a3eb8c49b7333e63136389f7c8ec6a5049acc82bd1e4d8aa90f3fa5c42673a944d809b1ebeefddfc6413e1588419c83b6
- TLSH
  T1CD41E81498F4182617FF10853D4ACA5FEF4482978329AB45307CA2833FBD836898B952
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral7
- Target
  VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/Info.plist
- Size 1KB
- SHA256 de8ee1845f67374ca43aa5c4ec249c24697a78d1f9a84d5e2ffb29d9a0f2c7b7
- MD5 7811d5855a341ae7592a2c57a1fdcd2d
- SHA1 8b7ab963bee7e0004a272e302a15e10d1069a7ab
- SHA512 e27e969d865655e0e6c5379c42a08abc4a2cf38bdbed7e84661e2b230eb421ba1bbdf0a958931c0162abf8cc9be720abe0fbf0b68c25ea75bfa84d9f8935d82c
- TLSH
  T10E3148B5023036092D8112E692F3D16E119861CC5E7741FEFCCEA53F2A1EE27B271A57
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral8
- Target
  VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/MacOS/VMProtect Licensing Test
- Size 60KB
- SHA256 de496be3920cc394099a2ec00a8aa195a1f016345cd0c48020fdaea2e2630a65
- MD5 e6ce50492c6c59c7087df14cd8ffeae4
- SHA1 6b85338bc2df31a08c01d961223fc0b175e5a0d3
- SHA512 a49e405b8c8bef85dfa4fb4693b68b13666c000d251cfd28c3ff19e13e8a780741c8168b6e9b1ca62f7a7a591d087855037775b741d91b8d6fb6cf3b56bfd1a8
- SSDEEP 768:iKBGMP6z8LPl/PRpWJ4WYlFxs9ugC5ljgZ+NGsIXIAIdIQCxr7pdOVWHSZr:itM6z0NRjWo2VC5ljgxSsr7p4VWSr
- TLSH
  T1BF532957FF20854BC98B4075C81E8B1CE139F768CF91B39B26A8DA884FB46535F0664B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/MacOS/libVMProtectSDK.dylib
- Size 49KB
- SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
- MD5 df2b9db64b5d9f268303a44f1b7526da
- SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
- SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
- SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
- TLSH
  T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/PkgInfo
- Size 8B
- SHA256 82502191c9484b04d685374f9879a0066069c49b8acae7a04b01d38d07e8eca0
- MD5 23b7d7d024abb0f558420e098800bf27
- SHA1 9f9eea0cfe2d65f2c3d6b092e375b40782d08f31
- SHA512 f77d501528dd0ced155c80406cfbee38d5d3649b64d2a9324f3d6cee39491eb8f54cdebae49c6e21a20d2309d8fae1b01c41631224811e73483db25a2695738c
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral11
- Target
  VMProtect/Licensing/Xcode/VMProtect Licensing Test-Info.plist
- Size 1KB
- SHA256 536668bca1fb24cab8af74116ea753b041aacd1f61851da5ea853805f93d814d
- MD5 1182fba48ed55b87ad6a2210ecc449c7
- SHA1 7b36b6c82e31358e9e8dcad3199d3d507b9c0013
- SHA512 4996fe8569475ddf1d169795bd78af220a46f30c63b496f753e9e5406494c5bcbccbf426da54d289a1ae5cedcafafda2d8a05e846d938fbbc10dff3174bb36f4
- TLSH
  T1722126B1026175581E8213FB92F3C15A019862CC9E7701FAFCCEA63B200E9277370A56
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral12
- Target
  VMProtect/Licensing/Xcode/VMProtect Licensing Test-Prefix.pch
- Size 183B
- SHA256 3a48c1828d8385003447c835daf8fc0361692cf8eda1e2bf71a3e8d9c3cfc71f
- MD5 06819dddfacfaedabdb8c2e23e8c5173
- SHA1 e790354dc9d678409b02d91ad51e889bd9b04eb8
- SHA512 f5167c38f407539f67e801c28c904193d2d0f60b4d798589c8171ebb5b3ecc2aa290fa466b13c67d6cbad852f9b1a38cdaf53a71576863119ca7de29088c9ee8
- TLSH
  T162C0221CE40073A792C004809B0CDFE3730E62208BE3A62BD049D0202621D3C0052CF7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13
- Target
  VMProtect/Licensing/Xcode/VMProtect Licensing Test.xcodeproj/project.pbxproj
- Size 14KB
- SHA256 58817ac0792b3f5d4d26d4e96011314e044a346a9b6628b843bbfe8e52d56b66
- MD5 85d56c5bb24e3555d27e802246f201d9
- SHA1 86ca7b047b2383874d77bca68dc5ac46b9564abe
- SHA512 58fea88716d89eb273273f7278983ae40c9f6b0aa65687b9e68aa75d0b2b570f0170e9d86648a4c1500829a9744e2e9a14b6f6e6ce2e541672e97894d04a6000
- SSDEEP 192:wp3QqqpibxuNJklr6WsRPJRnqisLCw8ALCw2G606Hi3iF:cmbx0CwRCwv606j
- TLSH
  T14A62216B750C3227C2B41372F635CEA0F21DC23A59D864ECD4869C8525A885EC7FDEDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  VMProtect/Licensing/Xcode/VMProtect Licensing Test.xcodeproj/project.xcworkspace/contents.xcworkspacedata
- Size 176B
- SHA256 0a034b7b5a28b255efdb6688f11126c60536dd53336256c942cfa80a97a1124b
- MD5 b7a43fcb7e02669fa920eaa1f473509d
- SHA1 599d5b1238ac238e607ff1d925a8645c9038c014
- SHA512 fce72d971e38637e49f41b40a6050a31999d04f2b1a8838385a9c160fa92522ebe9ec5e890810bb7292d3b44ef279ac5913bd879aef1d807f812966a4e9ca4b5
- TLSH
  T1D3C012B951907A2719B18E514B16CC54F378614E20A44405759B8A932F2161CC3939D4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral15
- Target
  VMProtect/Licensing/Xcode/VMProtectLicense.ini
- Size 141B
- SHA256 5ea757aa7e8df875c9dd7ebfdeff50b8086ad1d0f71c0e6f6aee48980d5f2bfa
- MD5 5f5200b0dd7009a0ef12ec5105e594dc
- SHA1 ee25ab7071919120740c7bae4d17db559304445c
- SHA512 50583dd18b0d3a4ddbfcbc6ed26cc968b0a455dbe44551fefe9a564210c06af37777a04db0b7065076f562f29877303e881f578a366eb4089b666864b2cd6bc8
- TLSH
  T1D5C02B40662020C4000231242E344C03B452C0354DC440F614845F8042F3C017BAC044
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral16
- Target
  VMProtect/Licensing/Xcode/VMProtectSDK.h
- Size 3KB
- SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
- MD5 e8c78f60aaad4671110eba8991fe94ef
- SHA1 dce765aa7929102ad95dfac47325c67bc668c409
- SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
- TLSH
  T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17
- Target
  VMProtect/Licensing/Xcode/en.lproj/Credits.rtf
- Size 137B
- SHA256 00be0708f1551e4184d1b6c7bb54a81dd4b3236bfe8d4ba13e49ac9221787ac4
- MD5 dc6c5c1a1cbee6b94374aa5287f7e79e
- SHA1 7fb83ff236d4480da52c36cd609e96ae03c98164
- SHA512 71ca4e5e18652b3f1b41899fdfd6a1740894aeda493ab0c3f05bc1a2f9bfdf884d071f6b6f156ad75bb703ceacc21d0b0ae88a93d32e08b2b1ebb185f7341127
- TLSH
  T174C04CADE44100904AC5A66EB9DA833E6AD0A6857687CD96155408507A4191B22D6C54
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral18
- Target
  VMProtect/Licensing/Xcode/en.lproj/InfoPlist.strings
- Size 47B
- SHA256 2a7f77dd390052d5407e2b494b173a9fc6b671ab757d25b79ed23352361dce5c
- MD5 3e5337e7aae41797043107c0a05980c7
- SHA1 c3b87f4a1d0b7a81c08b54aa19dfcd34db210ae2
- SHA512 23ca07123e45876869ea50dd5b22104d2934a6ad4dfeb3064c2e604536dd0df2c29076b70c1f475f015981654eb81d70c10a96cf678a4cc6913fd48eff8f20d5
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral19
- Target
  VMProtect/Licensing/Xcode/en.lproj/MainMenu.xib
- Size 156KB
- SHA256 20d53d1fd2101506e230c99e8f45719881690a154da817af6da1b73357245026
- MD5 7d858d777b2204b2ab0bb11f7cccbaa0
- SHA1 61a1cfb9b8350edaebca6297eb294234f5fd7e02
- SHA512 bed6c8f7436ea0e96b2fa0e8fa612643c9ef9582e3ff7f10c198d88dc79a69196fad3abceaf426bdbc9d0bdea22082e5b9a70509744bba22cba3cfd2fff4125a
- SSDEEP 384:i3qyt8EXSMFUVXLz21h2V0TSqwZ1PcAzk16ITNu+UJcDobguMpo0NSPaH86cT0NM:ifLM11LAywQXUZSz4psX
- TLSH
  T1CEF3390336CEB4990773145F8BB15E09705FCC7D82A86663B0F1D57BEE59EB1882226B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral20
- Target
  VMProtect/Licensing/Xcode/libVMProtectSDK.dylib
- Size 49KB
- SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
- MD5 df2b9db64b5d9f268303a44f1b7526da
- SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
- SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
- SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
- TLSH
  T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  VMProtect/Licensing/Xcode/main.m
- Size 268B
- SHA256 1ed2881b24fce2892811bda260f5b4152fa2a723a83da149359270d61eb28263
- MD5 85a111c49304b0a60035426a215ee237
- SHA1 dbe6051ac6caa64a55e0a485ed5a2fa42d47d87f
- SHA512 67b9479faa39e11ac68791e1e6338c4f0da34f75cc1e77064cdd76164ea473f332a76bd3cdbaf722811c19e9e4b8e8c9a2f02e010a9e11b6f5fb2368e915804b
- TLSH
  T188D02B9510E558778BE2A267A8438F02F2117502E6BB78532585D0076DA2C9520A440B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  VMProtect/Scripts/Delphi Resources/Project1.exe
- Size 887KB
- SHA256 a14c1e75ce36821ecd80e4525c888c9d58e80a23a8a5f6ebe9923f6a33d93e7d
- MD5 fcdd67939f856f8bcfc404bb5f706ec7
- SHA1 758d14e6d838e12d2c1e52f65594a91dbe744f4b
- SHA512 18be594c08513e005840d9af00174edb021fda635e5331528310f72fcfce20938edef99965ccf0039ec0283500239642bb6ff6809ef797c79f6c4c5ba1a6aff2
- SSDEEP 24576:FiRfWQHP2VPwHgzDe/EMdwBmSPk96vBL/5YSnrnS:AWHPISVZ9YSrnS
- TLSH
  T151156C13B392173FC136163AC96792A05C3B7A102E965856DFF4CD8C1FF92A12C3AA57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23
- Target
  VMProtect/Scripts/Delphi Resources/Project1.exe.vmp
- Size 1KB
- SHA256 52fc0fc9ca0e0656d4e42679ca3000a5355c93263feec7ed42728e4fbf3841b6
- MD5 ff49b44e7a2bb91461047c90a71ec505
- SHA1 f749fdfd1169cde78cd5404269f0f0e5f6b9da80
- SHA512 92415bf4671340f1fb5c218636051f5e7163fa8e710cd56d7eb4a038b0a0276a447819d444c52730ad2dddc6e22545126ce55c517d7fe4877355034f2b058ee1
- TLSH
  T1B5112118B599394046B210E478B5D984FE26C2C303780A41F0ED51275FB199DC9E7EB3
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral24
- Target
  VMProtect/Scripts/Environment Variables/Project1.exe
- Size 3KB
- SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
- MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
- SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
- SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
- TLSH
  T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral25
- Target
  VMProtect/Scripts/Environment Variables/Project1.exe.vmp
- Size 758B
- SHA256 4ccaf3279c3877e892d92e4bb445fc0aea379813c941a6b2d33a84272ce76eee
- MD5 ab4f04736edde15220a7068debe5771d
- SHA1 f89c7aa258820f2ddccacb5db73671d814b66bab
- SHA512 bc926d4d30d51d45411d7e93669cadbd10d0c5448362ea93e125fc2853124728bb8fb100e9f26c0efadf3d9123eb6cd288d7a8543db91852f622b1edceadf5e4
- TLSH
  T1C2014E0C56D4B90103FB50D43695D98EFEA183D3036A0A8172ECD79B0F7F5548AC7663
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral26
- Target
  VMProtect/Scripts/External DLL/Project1.exe
- Size 3KB
- SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
- MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
- SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
- SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
- TLSH
  T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27
- Target
  VMProtect/Scripts/External DLL/Project1.exe.vmp
- Size 977B
- SHA256 a7d574bfbc558160aeaa163b0614e6ff4999a822ecb1a0aa640e8dafa6518686
- MD5 488094cdaf3c671a77e2516c8368db20
- SHA1 fe88d96cf6bbb0dd522cef1166215d1cc1f15a35
- SHA512 dc51aa6bdda1b327f2bbd69cd7f00cf91bf0b34afae88fa56284e6a647a3d95d3cda80abeca099065f454ad442364727dafeb8a062fa1826081ee58b28b990eb
- TLSH
  T15511BD08E1542D4806F361D03ED6B959ECB44183423B0642B5AD51970F364A5C7A76BB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral28
- Target
  VMProtect/Scripts/Random Section Names/Project1.exe
- Size 3KB
- SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
- MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
- SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
- SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
- TLSH
  T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral29
- Target
  VMProtect/Scripts/Random Section Names/Project1.exe.vmp
- Size 1KB
- SHA256 85aed524596107b858af4f62456198cbf8342a02ed472721f7f0f1566f04adf5
- MD5 d31e21a051463f08091283c4f974adb2
- SHA1 5e8f033ed0b178884dbc08fe8a375ab909f95e8f
- SHA512 bf3b45a115506509d0f2f5d952e5903bd39ad181dd100f9ec78e8d490fb5e1929bd01f950c1a9b9c65f366e43a72ded3ed0e2d67f9ef2fcb813815f54d0196bd
- TLSH
  T13611AF18B68165011AF350A021F68989FDB19293033E0A40B0DC625B9F36DAD5AE79FB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral30
- Target
  VMProtect/Scripts/Script Events/Project1.exe
- Size 3KB
- SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
- MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
- SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
- SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
- TLSH
  T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral31
- Target
  VMProtect/Scripts/Script Events/Project1.exe.vmp
- Size 782B
- SHA256 c417b7afe50d6b6f10260fca070be34bf32003aef75b49e9aa3e480ab135b1d3
- MD5 42bee32b7a94c7b96259f778cc9c4230
- SHA1 a90ae01091f822ef7503894fed4d02446c096512
- SHA512 453b881ccb82cb0aa3dacf1db892a96aa1029288ef2ad39497db38763822858bc840996c72a3035b45f4379a84f4c3f9ee99e3012436941f5ead6e382792647d
- TLSH
  T1B8019C0CA15D6A4003F702956BA78D86ECF182D303760781B99C969B1F328948F936FB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32