General
-
Target
f4adc3d6e7895aa467b6469c94affda8213742897969aff95ddc480c8a9ac141
-
Size
1.8MB
-
Sample
220923-gtegnshccj
-
MD5
8db2b403d740a87e51f390ee83771985
-
SHA1
bf8c39b4b84438f378b7ac6f98f2b5877d123100
-
SHA256
f4adc3d6e7895aa467b6469c94affda8213742897969aff95ddc480c8a9ac141
-
SHA512
118a631524ac21ae26a5b3e49254aa2b9d6ba4ea8ff19eaf11febedbf530c79ceb8bb185dafce2ff0649067af167da4f5b907426e1000d34a47648f74663e7c2
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
f4adc3d6e7895aa467b6469c94affda8213742897969aff95ddc480c8a9ac141
-
Size
1.8MB
-
MD5
8db2b403d740a87e51f390ee83771985
-
SHA1
bf8c39b4b84438f378b7ac6f98f2b5877d123100
-
SHA256
f4adc3d6e7895aa467b6469c94affda8213742897969aff95ddc480c8a9ac141
-
SHA512
118a631524ac21ae26a5b3e49254aa2b9d6ba4ea8ff19eaf11febedbf530c79ceb8bb185dafce2ff0649067af167da4f5b907426e1000d34a47648f74663e7c2
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-