General
-
Target
71cc115830623e96d16bc63e109ecbeb98fc556583568ec16d2c66ffe7988f08
-
Size
1.8MB
-
Sample
220924-31gq9scea5
-
MD5
97ed691c1ba0cf9d6cf60187e642a37f
-
SHA1
626a9718028d1405e5c8becf98962b7f9d887824
-
SHA256
71cc115830623e96d16bc63e109ecbeb98fc556583568ec16d2c66ffe7988f08
-
SHA512
e185ce1d720f19baafaa7a9157a4667578614215af38ee37d4a5cd5b174ff3299c5b8cf529dccc4c4eb5c338e93e8de11174be8d1405a2d67b5ea90b6e3cf7be
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
71cc115830623e96d16bc63e109ecbeb98fc556583568ec16d2c66ffe7988f08
-
Size
1.8MB
-
MD5
97ed691c1ba0cf9d6cf60187e642a37f
-
SHA1
626a9718028d1405e5c8becf98962b7f9d887824
-
SHA256
71cc115830623e96d16bc63e109ecbeb98fc556583568ec16d2c66ffe7988f08
-
SHA512
e185ce1d720f19baafaa7a9157a4667578614215af38ee37d4a5cd5b174ff3299c5b8cf529dccc4c4eb5c338e93e8de11174be8d1405a2d67b5ea90b6e3cf7be
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-