General
- Target loader.vmp.exe
- Size 25.5MB
- Sample260822-la7rbsxtew
- SHA256 dfacc25fbf9d13d7cc45cc2428e31609df7cf42b9818b1863e0aaaf85849e976
- MD5 e4207e8425a57a0e459e177567582ff9
- SHA1 2c1411e2b6e7338d9395024540d831f72c119d76
- SHA512 fd8f187439ad24f1885d8df761979480eaf8b1947a1c1d26627d2af5870d86b9c9f306439676eb98d27a9cba726f1487e2f6e2f05bb7d1808d980518592876a8
- SSDEEP 393216:Iz32WSteb6F/SGdUBPVvU/51sOcXSsvUypCtb6xg/8/yC94N5heU:WEwbSaye181/3mK6SUaC9yhT
- TLSH T1714723D269D692E4E3D34F08D2CB13879390B2D9D596861E35C6AC032931EA78F46D3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader.vmp.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader.vmp.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target loader.vmp.exe
- Size 25.5MB
- SHA256 dfacc25fbf9d13d7cc45cc2428e31609df7cf42b9818b1863e0aaaf85849e976
- MD5 e4207e8425a57a0e459e177567582ff9
- SHA1 2c1411e2b6e7338d9395024540d831f72c119d76
- SHA512 fd8f187439ad24f1885d8df761979480eaf8b1947a1c1d26627d2af5870d86b9c9f306439676eb98d27a9cba726f1487e2f6e2f05bb7d1808d980518592876a8
- SSDEEP 393216:Iz32WSteb6F/SGdUBPVvU/51sOcXSsvUypCtb6xg/8/yC94N5heU:WEwbSaye181/3mK6SUaC9yhT
- TLSH T1714723D269D692E4E3D34F08D2CB13879390B2D9D596861E35C6AC032931EA78F46D3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext