General
-
Target
e028458918f6865dd696b457557343f32b8987f439daaf2dd9930a4eb9c05317
-
Size
1.8MB
-
Sample
220923-gwlnrsdcf9
-
MD5
9b762b0ea252b82ee11df2921771fd91
-
SHA1
bbf190ba9bf0a1293b01eb3954c1d12e1f4b8d80
-
SHA256
e028458918f6865dd696b457557343f32b8987f439daaf2dd9930a4eb9c05317
-
SHA512
e751708db840fd2af0485259c54ef60663ee33a915bdb325368143a81a322ac9485535803a29d6ff24bc04a1f5eb1b2286b1a65984f94f029d44b2bbff3bca2f
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
e028458918f6865dd696b457557343f32b8987f439daaf2dd9930a4eb9c05317
-
Size
1.8MB
-
MD5
9b762b0ea252b82ee11df2921771fd91
-
SHA1
bbf190ba9bf0a1293b01eb3954c1d12e1f4b8d80
-
SHA256
e028458918f6865dd696b457557343f32b8987f439daaf2dd9930a4eb9c05317
-
SHA512
e751708db840fd2af0485259c54ef60663ee33a915bdb325368143a81a322ac9485535803a29d6ff24bc04a1f5eb1b2286b1a65984f94f029d44b2bbff3bca2f
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-