General
-
Target
VanityCheats.exe
-
Size
3.4MB
-
Sample
220712-j2cddsheam
-
MD5
1b3557e483aed7e5d833cfbc19b8fe92
-
SHA1
1bb86439d8a7fbc4b6881135d72cf2b33859f3e8
-
SHA256
e9a82925d4e3133bfd0228562e6be0eb174f31505ab1fdb52df27dfd86e75bc8
-
SHA512
cd94821625c3bcae24a028af7abf2a9388bf645ce29a7b88934eb7ccdfc7303d265e366ab1c774523acbfc8d574f8a9853ff78f62d1849ff771304c4f57a7ae7
Static task
static1
Malware Config
Targets
-
-
Target
VanityCheats.exe
-
Size
3.4MB
-
MD5
1b3557e483aed7e5d833cfbc19b8fe92
-
SHA1
1bb86439d8a7fbc4b6881135d72cf2b33859f3e8
-
SHA256
e9a82925d4e3133bfd0228562e6be0eb174f31505ab1fdb52df27dfd86e75bc8
-
SHA512
cd94821625c3bcae24a028af7abf2a9388bf645ce29a7b88934eb7ccdfc7303d265e366ab1c774523acbfc8d574f8a9853ff78f62d1849ff771304c4f57a7ae7
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-