General
-
Target
5ed125ac97b0533b1901f0da2a4a0e607db2aa093f4b10ccb6f615def99ba041
-
Size
7.4MB
-
Sample
220727-xjmcjagedm
-
MD5
0422953883c954bee029983989cb0311
-
SHA1
6b5b37384e78bb187659c8096a1dfca5d78ede95
-
SHA256
5ed125ac97b0533b1901f0da2a4a0e607db2aa093f4b10ccb6f615def99ba041
-
SHA512
866c3ba1bca939d83875c235c7ea79b3780e2f7aba87d3cffb7c6d7b712c3de0ca8bbb279fe462301a4ac1e306f4ab7005adc2ec5e93ea466c57e192fc2b0a28
Behavioral task
behavioral1
Sample
5ed125ac97b0533b1901f0da2a4a0e607db2aa093f4b10ccb6f615def99ba041.rar
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
5ed125ac97b0533b1901f0da2a4a0e607db2aa093f4b10ccb6f615def99ba041.rar
Resource
win10v2004-20220721-en
Behavioral task
behavioral3
Sample
Setup/Setup.exe
Resource
win7-20220718-en
Malware Config
Targets
-
-
Target
5ed125ac97b0533b1901f0da2a4a0e607db2aa093f4b10ccb6f615def99ba041
-
Size
7.4MB
-
MD5
0422953883c954bee029983989cb0311
-
SHA1
6b5b37384e78bb187659c8096a1dfca5d78ede95
-
SHA256
5ed125ac97b0533b1901f0da2a4a0e607db2aa093f4b10ccb6f615def99ba041
-
SHA512
866c3ba1bca939d83875c235c7ea79b3780e2f7aba87d3cffb7c6d7b712c3de0ca8bbb279fe462301a4ac1e306f4ab7005adc2ec5e93ea466c57e192fc2b0a28
Score3/10 -
-
-
Target
Setup/Setup.exe
-
Size
386.2MB
-
MD5
a8b08bd8aeed8e21b5980c2a8f68a73a
-
SHA1
284096cc1f85ec1c6bc96afde0b6a200124b2b19
-
SHA256
8646d12ad525262b59762afac1e66d2b145b88575ab6c2c3c82f0dd85fa99a83
-
SHA512
feb882a018d8364be6d26f69024f7279b7a72de80f1e9f76d9a20d67a04731d15aa1247ee43c9e4f4ef02c0af3253de6c00a76e025e8668cc09f88fa32eb4574
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-