Analysis
- user interaction
yes - max time kernel
123s - max time network
125s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
21/08/2026, 17:10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
VMProtect Lite v3.10.4 Build 2668.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
General
- Target VMProtect Lite v3.10.4 Build 2668.zip
- Size 36.9MB
- Sample260821-vp3klax1ht
- SHA256 ca70a7da1fb07c687a428696587cea77c6b623a709c8ab2364aa8b3e816124f7
- MD5 98188a40e9f98bfb8dcc7c2975c76f34
- SHA1 33a977625228aa89131b3e60a9175ed4c3c11fae
- SHA512 fda108f6677fc99f98018b5d8dbb874ab10620e228a440f4c3e1ec9f44d2e410b4acdfcef32c7162b87b08b271a45393e80f90fcd7cf4a054e261c8b0c91712e
- SSDEEP 786432:HlFHW7mrv1OJX1iY/oJkAnFHIR3h3deb7jDXSU9RFLAzINsNBChCvporBi:FFHE2dOJX1zAJkeFHMjcjLRFLqzChYoI
- TLSH T1EB873380FA47814BFE92667C2500FB456F1BB64C2BFDD4A36E092BC299E57BC800559F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\VMProtect Lite v3.10.4 Build 2668.zip"1⤵PID:3212
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3460