General
-
Target
19939221b42945f254c280e7029b02a397e9e3d78e200293bf3c8f2ec4400a5c
-
Size
3.0MB
-
Sample
220130-vnx9gsfacj
-
MD5
2934a7a0dfaf2ebc81b1f089277129c4
-
SHA1
4378996bbb7be3a805d77899a98ff7ac62933c0e
-
SHA256
19939221b42945f254c280e7029b02a397e9e3d78e200293bf3c8f2ec4400a5c
-
SHA512
98f7e56e6a7408ee96020e0fd529b51aef742caaa9a422a5d731b351f88cbc6b5a5de04eb1c38fc12801a83dcc17b320a5e9e7aa35e77708de02fb9ba68e13d1
Static task
static1
Behavioral task
behavioral1
Sample
19939221b42945f254c280e7029b02a397e9e3d78e200293bf3c8f2ec4400a5c.dll
Resource
win7-en-20211208
Malware Config
Targets
-
-
Target
19939221b42945f254c280e7029b02a397e9e3d78e200293bf3c8f2ec4400a5c
-
Size
3.0MB
-
MD5
2934a7a0dfaf2ebc81b1f089277129c4
-
SHA1
4378996bbb7be3a805d77899a98ff7ac62933c0e
-
SHA256
19939221b42945f254c280e7029b02a397e9e3d78e200293bf3c8f2ec4400a5c
-
SHA512
98f7e56e6a7408ee96020e0fd529b51aef742caaa9a422a5d731b351f88cbc6b5a5de04eb1c38fc12801a83dcc17b320a5e9e7aa35e77708de02fb9ba68e13d1
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-