General
-
Target
5bd3d8b3aac3565a9a07fe0b888adc186fd3afab24b8f5545e91a745503d13a6
-
Size
5.2MB
-
Sample
220801-t2n3asedcr
-
MD5
fe47daf12c57b5b65f30a5722ac813f8
-
SHA1
0640dd5724df5f2817f983d33a0f6bab6dfd5dbe
-
SHA256
5bd3d8b3aac3565a9a07fe0b888adc186fd3afab24b8f5545e91a745503d13a6
-
SHA512
fab667e805e14c5ca56b0ee128885ff78f13c3826a2580eeaaa3212353db335b4f12fbf78dca137a21b11f9bc17f3611b51fa6c6f79fcb682ebd4fb45e9ca3d6
Behavioral task
behavioral1
Sample
5bd3d8b3aac3565a9a07fe0b888adc186fd3afab24b8f5545e91a745503d13a6.exe
Resource
win7-20220718-en
Malware Config
Targets
-
-
Target
5bd3d8b3aac3565a9a07fe0b888adc186fd3afab24b8f5545e91a745503d13a6
-
Size
5.2MB
-
MD5
fe47daf12c57b5b65f30a5722ac813f8
-
SHA1
0640dd5724df5f2817f983d33a0f6bab6dfd5dbe
-
SHA256
5bd3d8b3aac3565a9a07fe0b888adc186fd3afab24b8f5545e91a745503d13a6
-
SHA512
fab667e805e14c5ca56b0ee128885ff78f13c3826a2580eeaaa3212353db335b4f12fbf78dca137a21b11f9bc17f3611b51fa6c6f79fcb682ebd4fb45e9ca3d6
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-