General
-
Target
AUTOKEY.exe
-
Size
6.5MB
-
Sample
220731-fq28wshdh5
-
MD5
68aebec982d6d6df5af8a0e66e0b1213
-
SHA1
44e42b332e9b65a431ca63941d372698c1f5b7d8
-
SHA256
20ad6ebb675a70f37ad9e019108a818463b67174119641f160b2c7f39f35f8e3
-
SHA512
5eda091a925b6f151cd2fb7619cd315782d2c16798f3b870a8d870e8aba72abd71a199feab8a700851198168a1b845012173ca47763fe80324233a544c792b1d
Behavioral task
behavioral1
Sample
AUTOKEY.exe
Resource
win7-20220715-en
Malware Config
Targets
-
-
Target
AUTOKEY.exe
-
Size
6.5MB
-
MD5
68aebec982d6d6df5af8a0e66e0b1213
-
SHA1
44e42b332e9b65a431ca63941d372698c1f5b7d8
-
SHA256
20ad6ebb675a70f37ad9e019108a818463b67174119641f160b2c7f39f35f8e3
-
SHA512
5eda091a925b6f151cd2fb7619cd315782d2c16798f3b870a8d870e8aba72abd71a199feab8a700851198168a1b845012173ca47763fe80324233a544c792b1d
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-