General
-
Target
e0ce4f5b17395379d73166ad3a9f9d886b10e9bf2ef87ed909aefdd2cb073286
-
Size
1.8MB
-
Sample
220925-cv3tfacha6
-
MD5
89e60ef2823bfb7e96545ed678ec2817
-
SHA1
5decd2576c0a62999b1c4b81393793ce5f35a207
-
SHA256
e0ce4f5b17395379d73166ad3a9f9d886b10e9bf2ef87ed909aefdd2cb073286
-
SHA512
f3c049a19022e029c259ad363a89aa358b77c56885efff7a46626fcbe1c8d24e016b79a7a85219b640f9e3b9dbc5e9edddb9531eccaf2f6ffc943ed6d9ada351
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
e0ce4f5b17395379d73166ad3a9f9d886b10e9bf2ef87ed909aefdd2cb073286
-
Size
1.8MB
-
MD5
89e60ef2823bfb7e96545ed678ec2817
-
SHA1
5decd2576c0a62999b1c4b81393793ce5f35a207
-
SHA256
e0ce4f5b17395379d73166ad3a9f9d886b10e9bf2ef87ed909aefdd2cb073286
-
SHA512
f3c049a19022e029c259ad363a89aa358b77c56885efff7a46626fcbe1c8d24e016b79a7a85219b640f9e3b9dbc5e9edddb9531eccaf2f6ffc943ed6d9ada351
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-