General
-
Target
6bdac7e2d386881cf3c3ab18c20e35ced38fb6b3d11ef6a603caf5ba279e935b
-
Size
1.8MB
-
Sample
220925-f8peraddg4
-
MD5
3a4ed70d244459f9b76b6069119de207
-
SHA1
d8f1bfb88d1b97e50743b799e840879e7d2ad031
-
SHA256
6bdac7e2d386881cf3c3ab18c20e35ced38fb6b3d11ef6a603caf5ba279e935b
-
SHA512
74f5838a012d38e43074004aacf2d7860d570c91481ffd2d09a046d890a4986d0208dff9e23d60429a9ea777f4a88903ede3e4263bbd6ed150d2378457622da2
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
6bdac7e2d386881cf3c3ab18c20e35ced38fb6b3d11ef6a603caf5ba279e935b
-
Size
1.8MB
-
MD5
3a4ed70d244459f9b76b6069119de207
-
SHA1
d8f1bfb88d1b97e50743b799e840879e7d2ad031
-
SHA256
6bdac7e2d386881cf3c3ab18c20e35ced38fb6b3d11ef6a603caf5ba279e935b
-
SHA512
74f5838a012d38e43074004aacf2d7860d570c91481ffd2d09a046d890a4986d0208dff9e23d60429a9ea777f4a88903ede3e4263bbd6ed150d2378457622da2
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-