General
-
Target
DNH1276ERYUQ9DJ4.cuc
-
Size
10.1MB
-
Sample
220817-tgryfshgal
-
MD5
24ff3744640dab5d57c500cef99f92c5
-
SHA1
d629d5c11f54d7f5fc63a61ca29b454adf70ab2d
-
SHA256
0a5d83809a46649f21b8791da4ed28a8c3a533ce9abfb8c25ab5a344e9f56752
-
SHA512
011786760719faf161aec40f84d309ff008097b1df84556d0730db58c54d301f38487ac6295f7071a27c860d4bae626074aa47ffdab6e3f028ddf5eacf536282
-
SSDEEP
196608:TWLTQ7cPQiMnxe0BrJoFBBYtlsa460qgeBD9zT+5gbIZBgM3a:TqOViMk/FBBYLQlqbve5xZG
Behavioral task
behavioral1
Sample
aqgkoizjhx.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aqgkoizjhx.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
cjhd6l8fqb93e936l07tnx39lll.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
cjhd6l8fqb93e936l07tnx39lll.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
aqgkoizjhx.lbj
-
Size
10.0MB
-
MD5
21bbf04c9967ae237b8dc3e432419aa5
-
SHA1
4bc9e0b66caa6f6ba5c3308e6a6f9cb887e1ff24
-
SHA256
2f6957a17b9bc161dc74ac1bb60a20e75b1ce9f734baef833fbe6996f159078c
-
SHA512
5a00b35373bf40647d06e0c26f9a635320a5d4cb7942f2c6bac587bed0cd4ead3f373fe8f2f7c54ff69357154819c227f2e31eac38cac4a0bef1ddcb5d75c0c9
-
SSDEEP
196608:sIYL6ruLLgezRh4l+MlAr6dPtLCF9kpiE1hRvsqN/Nwc/V82t:Bxruw4klrar6dPlCrRE1hRvsqN/Nws
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
-
Target
cjhd6l8fqb93e936l07tnx39lll
-
Size
884KB
-
MD5
4685811c853ceaebc991c3a8406694bf
-
SHA1
9cd382eb91bfea5782dd09f589a31b47c2c2b53e
-
SHA256
3242e0a736ef8ac90430a9f272ff30a81e2afc146fcb84a25c6e56e8192791e4
-
SHA512
a504fbca674f15d8964ebc6fac11d9431d700ca22736c00d5bb1e51551b0d2b9e4b2b6824bdf1a778111a0ba8d2601eada2f726b9ec7a9cfa5a53fd43c235b46
-
SSDEEP
12288:oo6hrwBWQ1Ow8yPcT3ZinffOqJaFLGRTY7c223KmZaQRDSGEi:oo6dwBTj9U1wffO7FLG5Y7K3KmZ0GEi
Score1/10 -