Overview

overview

7

Static

static

3

Crimson Store Vip.exe

windows10-2004-x64

7

VMProtectSDK64.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Crimson Store Vip.rar
  • Size 540KB
  • Sample260903-sfx8eawtex
  • SHA256 f04cfe74d236816b53849ae39cbb5b95b850e15ed5de625e5379cd0e49019c0e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryexecution

Malware Config

Targets

    • Target
      Crimson Store Vip.exe
    • Size 1.0MB
    • SHA256 d57b465bf0c9d009999a5d9fd4bd65527ac591324d51cf954de3074d83f44731
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasiondiscoveryexecution

    • Stops running service(s)

      defense_evasionexecution

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral1
    • Target
      VMProtectSDK64.dll
    • Size 116KB
    • SHA256 4010814f40e19b8da59afd989188b9aed76390f2d44cc1a458267cd39f3888fc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral2

MITRE ATT&CK Enterprise v16

Tasks