General
-
Target
1bfb354637417a53201e4af621cc34bf2113b0bce97d70dac9cf68a2940da6c8
-
Size
1.8MB
-
Sample
220925-f5nztaddf4
-
MD5
e4df8d6ecb435dc88efd16702e7efe88
-
SHA1
a52bee4e82ed627c5d18b7afcf7000c47f6a6224
-
SHA256
1bfb354637417a53201e4af621cc34bf2113b0bce97d70dac9cf68a2940da6c8
-
SHA512
42b6bbaf2e764f5222fb20a5cee1aeb1862f180312bfa243c9b41ae3d32b02265adbbad95146964700af522905aa886414313144671974d7cc5afd8fecb8f9eb
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
1bfb354637417a53201e4af621cc34bf2113b0bce97d70dac9cf68a2940da6c8
-
Size
1.8MB
-
MD5
e4df8d6ecb435dc88efd16702e7efe88
-
SHA1
a52bee4e82ed627c5d18b7afcf7000c47f6a6224
-
SHA256
1bfb354637417a53201e4af621cc34bf2113b0bce97d70dac9cf68a2940da6c8
-
SHA512
42b6bbaf2e764f5222fb20a5cee1aeb1862f180312bfa243c9b41ae3d32b02265adbbad95146964700af522905aa886414313144671974d7cc5afd8fecb8f9eb
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-