General
- Target a64012d3bf88ddb3b5fa38628b8613ccad34c2a9a6ab7b1239c95d0972789faf
- Size 7.6MB
- Sample260907-cmk9esvtfx
- SHA256 a64012d3bf88ddb3b5fa38628b8613ccad34c2a9a6ab7b1239c95d0972789faf
Score
7/10
Malware Config
Targets
-
- Target a64012d3bf88ddb3b5fa38628b8613ccad34c2a9a6ab7b1239c95d0972789faf
- Size 7.6MB
- SHA256 a64012d3bf88ddb3b5fa38628b8613ccad34c2a9a6ab7b1239c95d0972789faf
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
VMProtect packed file
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger