General
-
Target
99febd4c40fd95d29fc215c9281ad5a0c05ae7821ff5c2ddbf3ccf15d9300044
-
Size
1.8MB
-
Sample
220925-fnckfsefdp
-
MD5
cff185422e7c7db9a239569c119b0691
-
SHA1
6162208c698eee0ec6b3c02aef9d72e58e8bbb1b
-
SHA256
99febd4c40fd95d29fc215c9281ad5a0c05ae7821ff5c2ddbf3ccf15d9300044
-
SHA512
4ab59fda4765384c0b2c9e2ac168402523c7123b2f3033b9ba9678ed6bd1bfd4d18eb354a01ba502f99b2648b1dc263b52c61d1d9868fb9f31b8e6a0e8e2f83d
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
99febd4c40fd95d29fc215c9281ad5a0c05ae7821ff5c2ddbf3ccf15d9300044
-
Size
1.8MB
-
MD5
cff185422e7c7db9a239569c119b0691
-
SHA1
6162208c698eee0ec6b3c02aef9d72e58e8bbb1b
-
SHA256
99febd4c40fd95d29fc215c9281ad5a0c05ae7821ff5c2ddbf3ccf15d9300044
-
SHA512
4ab59fda4765384c0b2c9e2ac168402523c7123b2f3033b9ba9678ed6bd1bfd4d18eb354a01ba502f99b2648b1dc263b52c61d1d9868fb9f31b8e6a0e8e2f83d
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-