General
-
Target
8ff35183efc774244aaea8ed306ce04a1376ff2f13004afa0fc5fa1e8baea6fe
-
Size
1.8MB
-
Sample
220925-abvbvadgfk
-
MD5
4c32a63a84d1749039082bd7bb61ed08
-
SHA1
d4dc81a8d04782e0a76d1067aff2abcc9b75a6c0
-
SHA256
8ff35183efc774244aaea8ed306ce04a1376ff2f13004afa0fc5fa1e8baea6fe
-
SHA512
316060e419ce10d3d88b3b4926cf1aa7ab6174ac0357ceafe69594fbe06d4a6bb04e5e821afa9e57db64a438ee4eced2b84306c8bb49d7018b477368bf988f9b
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
8ff35183efc774244aaea8ed306ce04a1376ff2f13004afa0fc5fa1e8baea6fe
-
Size
1.8MB
-
MD5
4c32a63a84d1749039082bd7bb61ed08
-
SHA1
d4dc81a8d04782e0a76d1067aff2abcc9b75a6c0
-
SHA256
8ff35183efc774244aaea8ed306ce04a1376ff2f13004afa0fc5fa1e8baea6fe
-
SHA512
316060e419ce10d3d88b3b4926cf1aa7ab6174ac0357ceafe69594fbe06d4a6bb04e5e821afa9e57db64a438ee4eced2b84306c8bb49d7018b477368bf988f9b
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-