General
-
Target
5decacd6c1bfd76faa6b6033ea1b7d4eb32180eb439323e6c2f6917784b66fbd
-
Size
1.8MB
-
Sample
220923-j2tmnshedl
-
MD5
935744e6fd870b63aea0e1401c904997
-
SHA1
a07210ab96c15436f2cc3a633b07ba168b3c3ba5
-
SHA256
5decacd6c1bfd76faa6b6033ea1b7d4eb32180eb439323e6c2f6917784b66fbd
-
SHA512
fb19b3ca9cd37556b04266d93c8e4452857d3b7420de0f390a4624ada611c1e3de6ecdf4f95dd1c9043c76e46449c62fc017dd325b4ca5f066eed8b2b4d3953a
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
5decacd6c1bfd76faa6b6033ea1b7d4eb32180eb439323e6c2f6917784b66fbd
-
Size
1.8MB
-
MD5
935744e6fd870b63aea0e1401c904997
-
SHA1
a07210ab96c15436f2cc3a633b07ba168b3c3ba5
-
SHA256
5decacd6c1bfd76faa6b6033ea1b7d4eb32180eb439323e6c2f6917784b66fbd
-
SHA512
fb19b3ca9cd37556b04266d93c8e4452857d3b7420de0f390a4624ada611c1e3de6ecdf4f95dd1c9043c76e46449c62fc017dd325b4ca5f066eed8b2b4d3953a
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-