General
-
Target
cee0f3ad8ecce443c8bbc22dfb616800899712e4f5fb2eaccb4b4e75e557ddcc
-
Size
1.8MB
-
Sample
220925-d48aysdad9
-
MD5
2f8c47a4c14ef78c2218b6a24bce0435
-
SHA1
9b5222917ba909887e4207dcf89818f8ca6aed97
-
SHA256
cee0f3ad8ecce443c8bbc22dfb616800899712e4f5fb2eaccb4b4e75e557ddcc
-
SHA512
3f5cbae9cf641d3bf7ce39e8fa1d6af51057188887513f10c7507909778f27725a5a2c49e92ef541dbcf6242b2ed26c19226aabd6305be121b4cb1ef70c54088
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
cee0f3ad8ecce443c8bbc22dfb616800899712e4f5fb2eaccb4b4e75e557ddcc
-
Size
1.8MB
-
MD5
2f8c47a4c14ef78c2218b6a24bce0435
-
SHA1
9b5222917ba909887e4207dcf89818f8ca6aed97
-
SHA256
cee0f3ad8ecce443c8bbc22dfb616800899712e4f5fb2eaccb4b4e75e557ddcc
-
SHA512
3f5cbae9cf641d3bf7ce39e8fa1d6af51057188887513f10c7507909778f27725a5a2c49e92ef541dbcf6242b2ed26c19226aabd6305be121b4cb1ef70c54088
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-