General
-
Target
1ec72e78c580c8cadf662e84b324816f299bcd835b857402a50ffd538739dfa8
-
Size
1.8MB
-
Sample
221003-dbjf5adaa2
-
MD5
f111ebaba6cb01d11736556630b9d7b8
-
SHA1
72d46678319a1e2d68c4a9e2cd9201902bdf2314
-
SHA256
1ec72e78c580c8cadf662e84b324816f299bcd835b857402a50ffd538739dfa8
-
SHA512
906b5da3c1bcbb4a003871e1e5836a119a9026a45976d612e49ad568af6ca258f4fc2720b3e5b7e478c17aabb2de01d31ac95015c539f51c45dbdc5e81c9d2cf
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
1ec72e78c580c8cadf662e84b324816f299bcd835b857402a50ffd538739dfa8
-
Size
1.8MB
-
MD5
f111ebaba6cb01d11736556630b9d7b8
-
SHA1
72d46678319a1e2d68c4a9e2cd9201902bdf2314
-
SHA256
1ec72e78c580c8cadf662e84b324816f299bcd835b857402a50ffd538739dfa8
-
SHA512
906b5da3c1bcbb4a003871e1e5836a119a9026a45976d612e49ad568af6ca258f4fc2720b3e5b7e478c17aabb2de01d31ac95015c539f51c45dbdc5e81c9d2cf
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-