General

  • Target

    c7632a1bbe82c3d2ae9146a0289bc2080d03878dd89fd1d9e9503a9e57af43c4

  • Size

    5.1MB

  • MD5

    7bfab958a3e53316b755d29ed1231cd7

  • SHA1

    950c63dc75ac79c94188cbb6c35388ba8be690b5

  • SHA256

    c7632a1bbe82c3d2ae9146a0289bc2080d03878dd89fd1d9e9503a9e57af43c4

  • SHA512

    3aa6afeaa75f501472f045a44132620014d4f77b5185f510574725f0657a7a6a22d5577f4be992604fab9e6c2632a17a7146444324b777ed76e9d4cb4d144dff

  • SSDEEP

    98304:2SG9hXzOe+Gf8yn1iTCK3aHaQ9TlOMWiLcVtAHDVBGr8hiNuQjuoFhIkZOo2:2PzFrLn1ifW7WiL9Hqr8hiNTjuoPISON

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • c7632a1bbe82c3d2ae9146a0289bc2080d03878dd89fd1d9e9503a9e57af43c4
    .zip
  • 1792EL4.4?/????.txt
  • 1792EL4.4?/Data/??1330.data
    .gz
  • ??1330.data
  • 1792EL4.4?/Data/??1330.datan
    .gz
  • ??1330.datan
  • 1792EL4.4?/Data/??1330.dbpb
    .gz
  • ??1330.dbpb
  • 1792EL4.4?/Data/??1601.data
    .gz
  • ??1601.data
  • 1792EL4.4?/Data/??1601.datan
    .gz
  • ??1601.datan
  • 1792EL4.4?/Data/??1601.dbpb
    .gz
  • ??1601.dbpb
  • 1792EL4.4?/Data/??1715.custom
  • 1792EL4.4?/Data/??1715.data
    .gz
  • ??1715.data
  • 1792EL4.4?/Data/??1715.datan
    .gz
  • ??1715.datan
  • 1792EL4.4?/Data/??1715.dbpb
    .gz
  • 1792EL4.4?/Data/??1792.data
    .gz
  • 1792EL4.4?/Data/??1792.datan
    .gz
  • 1792EL4.4?/Data/??1792.dbpb
    .gz
  • 1792EL4.4?/Data/??1792vipaward.data
    .gz
  • 1792EL4.4?/Data/??1792vipaward.datan
    .gz
  • 1792EL4.4?/ElementsEditor.exe
    .exe windows:5 windows x86 arch:x86

    2df5ae94022781dbc01ee7bd312dbbe3


    Headers

    Imports

    Sections

  • 1792EL4.4?/ElementsEngine.dll
    .dll windows:6 windows x86 arch:x86

    8529a09d4da4546aea9ec3783863db63


    Headers

    Imports

    Exports

    Sections

  • 1792EL4.4?/ElementsInterface.dll
    .dll windows:6 windows x86 arch:x86

    d9d2ea3edddc00ce7138a450cbc98f78


    Headers

    Imports

    Exports

    Sections

  • 1792EL4.4?/Update.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 1792EL4.4?/customversion.data
  • 1792EL4.4?/sign.dll
  • 1792EL4.4?/zlibwapi.dll
    .dll windows:4 windows x86 arch:x86

    24fe21732b2ce036a30379584f658b90


    Headers

    Imports

    Exports

    Sections