General
-
Target
544f841185f1f7aba56e90fa9461bb3454241386c396b366492a732f0a1e7c39
-
Size
1.8MB
-
Sample
220925-d87j8adag3
-
MD5
8feed870f349527aa037d9280baaf009
-
SHA1
0b9709a93cf6906badf46b2ac60c91f2209f6932
-
SHA256
544f841185f1f7aba56e90fa9461bb3454241386c396b366492a732f0a1e7c39
-
SHA512
68ccc6da2d8dd9f4672ed8af123f5b016cd77289c1f3ba77facb8a5e063c2c1a792a313160d75cf65543c09def6a27c5123c5741d3c61b375cebc006a2e69575
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
544f841185f1f7aba56e90fa9461bb3454241386c396b366492a732f0a1e7c39
-
Size
1.8MB
-
MD5
8feed870f349527aa037d9280baaf009
-
SHA1
0b9709a93cf6906badf46b2ac60c91f2209f6932
-
SHA256
544f841185f1f7aba56e90fa9461bb3454241386c396b366492a732f0a1e7c39
-
SHA512
68ccc6da2d8dd9f4672ed8af123f5b016cd77289c1f3ba77facb8a5e063c2c1a792a313160d75cf65543c09def6a27c5123c5741d3c61b375cebc006a2e69575
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-