General
-
Target
fd32e818837fb51fb99680f9b7d9249c8c7978bddf762d64314e6545ed4cac2e
-
Size
1.8MB
-
Sample
220924-2rjzladfcp
-
MD5
f06e1d7f9b9b30cbe8f0a30ebd4e3880
-
SHA1
7d51e392923bf258837f4b4b3b139463746afe50
-
SHA256
fd32e818837fb51fb99680f9b7d9249c8c7978bddf762d64314e6545ed4cac2e
-
SHA512
c59f38abf4c71b7e4b40fb46992f730840697ccc66b063761bfffbe52c9703d6c14e1d99c3f777a6153a6c12a1c46f945580a1b2d96a16adb531e43b77bd2fa1
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
fd32e818837fb51fb99680f9b7d9249c8c7978bddf762d64314e6545ed4cac2e
-
Size
1.8MB
-
MD5
f06e1d7f9b9b30cbe8f0a30ebd4e3880
-
SHA1
7d51e392923bf258837f4b4b3b139463746afe50
-
SHA256
fd32e818837fb51fb99680f9b7d9249c8c7978bddf762d64314e6545ed4cac2e
-
SHA512
c59f38abf4c71b7e4b40fb46992f730840697ccc66b063761bfffbe52c9703d6c14e1d99c3f777a6153a6c12a1c46f945580a1b2d96a16adb531e43b77bd2fa1
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-