General
-
Target
e66a001712595492e31b33bd698e1d7fbaeb3b2f49b04389d1177d9adefe72c0
-
Size
3.1MB
-
Sample
220725-w245mahgc3
-
MD5
542298aa62750cd818d3dad2290313aa
-
SHA1
1cd88165dca314a4363f50d59596c03362b01bae
-
SHA256
e66a001712595492e31b33bd698e1d7fbaeb3b2f49b04389d1177d9adefe72c0
-
SHA512
10fca949c1467fff74764f399c1f9795b5bafd9d8895aa68795f5ea6516c333856b034e9e2b03beb3e989397cc1e12cf38703338775fa503093215e197e27919
Behavioral task
behavioral1
Sample
e66a001712595492e31b33bd698e1d7fbaeb3b2f49b04389d1177d9adefe72c0.exe
Resource
win7-20220715-en
Malware Config
Targets
-
-
Target
e66a001712595492e31b33bd698e1d7fbaeb3b2f49b04389d1177d9adefe72c0
-
Size
3.1MB
-
MD5
542298aa62750cd818d3dad2290313aa
-
SHA1
1cd88165dca314a4363f50d59596c03362b01bae
-
SHA256
e66a001712595492e31b33bd698e1d7fbaeb3b2f49b04389d1177d9adefe72c0
-
SHA512
10fca949c1467fff74764f399c1f9795b5bafd9d8895aa68795f5ea6516c333856b034e9e2b03beb3e989397cc1e12cf38703338775fa503093215e197e27919
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-