General
-
Target
28a9972b258b51d94f4428fc19d7f265852d452bdbbebca449f480d4810574de
-
Size
2.3MB
-
Sample
240428-lwx41sda45
-
MD5
dbdcae7493733bc3309898e849b320ff
-
SHA1
e62295ae72a84f62c080c04c3946058741c08594
-
SHA256
28a9972b258b51d94f4428fc19d7f265852d452bdbbebca449f480d4810574de
-
SHA512
f46e6b7938e42075c938fb0df052d1bc8e48ff2f1e99d28e9a95fb99265baea6c11c84243b339356a9c1af25cbf24246f6c353ba9ab430d6ed8aa705e35364e3
-
SSDEEP
49152:Hg69SebPPiKgYydIQR+40MQFxEms3V4jY0dwyPDsOXt:Hg69SebiHImr0/FTkVDWss
Static task
static1
Behavioral task
behavioral1
Sample
28a9972b258b51d94f4428fc19d7f265852d452bdbbebca449f480d4810574de.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
28a9972b258b51d94f4428fc19d7f265852d452bdbbebca449f480d4810574de
-
Size
2.3MB
-
MD5
dbdcae7493733bc3309898e849b320ff
-
SHA1
e62295ae72a84f62c080c04c3946058741c08594
-
SHA256
28a9972b258b51d94f4428fc19d7f265852d452bdbbebca449f480d4810574de
-
SHA512
f46e6b7938e42075c938fb0df052d1bc8e48ff2f1e99d28e9a95fb99265baea6c11c84243b339356a9c1af25cbf24246f6c353ba9ab430d6ed8aa705e35364e3
-
SSDEEP
49152:Hg69SebPPiKgYydIQR+40MQFxEms3V4jY0dwyPDsOXt:Hg69SebiHImr0/FTkVDWss
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-