General
- Target bb6fa334c53dda3106b77c81e56bbff4.exe
- Size 88KB
- Sample201109-2d75z435hx
- SHA256 4b5e08d727e3e43db31db4f514737a9ac90088bb581df44beb9c0ca2c0d9bb07
- MD5 bb6fa334c53dda3106b77c81e56bbff4
- SHA1 1086083abbace705ee21b0a704a536769319f50e
- SHA512 b766526cb0ea098dbae646709b9cb43901a54c6ea73bd9df5ba76a8534af512bd681ffd148869a0635cb0d7263cd97f1461f4cbe89dc948a2bcd5a293fd0c283
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
bb6fa334c53dda3106b77c81e56bbff4.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
bb6fa334c53dda3106b77c81e56bbff4.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target bb6fa334c53dda3106b77c81e56bbff4.exe
- Size 88KB
- SHA256 4b5e08d727e3e43db31db4f514737a9ac90088bb581df44beb9c0ca2c0d9bb07
- MD5 bb6fa334c53dda3106b77c81e56bbff4
- SHA1 1086083abbace705ee21b0a704a536769319f50e
- SHA512 b766526cb0ea098dbae646709b9cb43901a54c6ea73bd9df5ba76a8534af512bd681ffd148869a0635cb0d7263cd97f1461f4cbe89dc948a2bcd5a293fd0c283
- MD5 SHA1 SHA512
Score7/10-
Checks QEMU agent state file
Checks state file used by QEMU agent, possibly to detect virtualization.
-
Suspicious use of NtSetInformationThreadHideFromDebugger