General
-
Target
5df6379d78ecbb41bd63f2994f265888237d59f8e6cb8b8b795d3fb87a25f797
-
Size
4.2MB
-
Sample
220731-1rbgsahgh9
-
MD5
0d46b2b41d30342a99cfcb11a8de7c17
-
SHA1
8ae9728e8fd883eb3e66f32db503d1ee50d04fd0
-
SHA256
5df6379d78ecbb41bd63f2994f265888237d59f8e6cb8b8b795d3fb87a25f797
-
SHA512
a46e5f85fc513af45a919c3517c3c5312cc5e6fe30d17b4eaedc24cce840b094fea52cfffef989f501bb0fc1423eb89235901927f677537fdf978fc1788d28fa
Behavioral task
behavioral1
Sample
5df6379d78ecbb41bd63f2994f265888237d59f8e6cb8b8b795d3fb87a25f797.exe
Resource
win7-20220718-en
Malware Config
Targets
-
-
Target
5df6379d78ecbb41bd63f2994f265888237d59f8e6cb8b8b795d3fb87a25f797
-
Size
4.2MB
-
MD5
0d46b2b41d30342a99cfcb11a8de7c17
-
SHA1
8ae9728e8fd883eb3e66f32db503d1ee50d04fd0
-
SHA256
5df6379d78ecbb41bd63f2994f265888237d59f8e6cb8b8b795d3fb87a25f797
-
SHA512
a46e5f85fc513af45a919c3517c3c5312cc5e6fe30d17b4eaedc24cce840b094fea52cfffef989f501bb0fc1423eb89235901927f677537fdf978fc1788d28fa
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-