General
-
Target
9e80882513f78fdc3c35a891d08830cd64d6a013b8b3f866e8d750116d9d2007
-
Size
1.8MB
-
Sample
221003-hfwz8sbga2
-
MD5
03f7d1eb5147e8c504a3ddc393739638
-
SHA1
ccd5ddf7a8c5ca46b7589292a146ee7b52065a3a
-
SHA256
9e80882513f78fdc3c35a891d08830cd64d6a013b8b3f866e8d750116d9d2007
-
SHA512
eb91697bc3cad33db7c82b209fe92bf0780500ca571157bb43181a19718d4500cfc685f131a8ec6868331ecd95af18001b08801bb70a9b3ec38f992cfd54230d
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
Static task
static1
Malware Config
Targets
-
-
Target
9e80882513f78fdc3c35a891d08830cd64d6a013b8b3f866e8d750116d9d2007
-
Size
1.8MB
-
MD5
03f7d1eb5147e8c504a3ddc393739638
-
SHA1
ccd5ddf7a8c5ca46b7589292a146ee7b52065a3a
-
SHA256
9e80882513f78fdc3c35a891d08830cd64d6a013b8b3f866e8d750116d9d2007
-
SHA512
eb91697bc3cad33db7c82b209fe92bf0780500ca571157bb43181a19718d4500cfc685f131a8ec6868331ecd95af18001b08801bb70a9b3ec38f992cfd54230d
-
SSDEEP
49152:AiSzCD+K95aLs7zeqLTVtXtHFIDP8EehiM8qZA:AiSzCD+K95aUeqFtXtHwEEehig
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-