General
-
Target
79ddccea3a28e131458edc499d2b50fcf111b799cbf4d66f653dd89216b09559
-
Size
1.8MB
-
Sample
221003-dk13jaehdm
-
MD5
2e0861f46d2ad2200856d84dff8d7e55
-
SHA1
5a6410e2d9e6428c724156b222f4e15a8dff21c2
-
SHA256
79ddccea3a28e131458edc499d2b50fcf111b799cbf4d66f653dd89216b09559
-
SHA512
941b224f89a98986f3272ea244ca544f4b0e3c97b17108aa4e0b371e0d712d28d3293632577334b54820d9bd49dd0b243988aca95aaa7bd6f3f6bc4ab90a276c
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
79ddccea3a28e131458edc499d2b50fcf111b799cbf4d66f653dd89216b09559
-
Size
1.8MB
-
MD5
2e0861f46d2ad2200856d84dff8d7e55
-
SHA1
5a6410e2d9e6428c724156b222f4e15a8dff21c2
-
SHA256
79ddccea3a28e131458edc499d2b50fcf111b799cbf4d66f653dd89216b09559
-
SHA512
941b224f89a98986f3272ea244ca544f4b0e3c97b17108aa4e0b371e0d712d28d3293632577334b54820d9bd49dd0b243988aca95aaa7bd6f3f6bc4ab90a276c
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-