General
-
Target
d87cbb12038ffa3f7b40e95c435d489ef9c43ffe785b8b00cbd9c6397c88a806
-
Size
110KB
-
Sample
221125-hrym7shf22
-
MD5
b6790b1c698b844b64c465f3513d5163
-
SHA1
ad0042ed1a2a5ed71abb751d63ecb782947808e4
-
SHA256
d87cbb12038ffa3f7b40e95c435d489ef9c43ffe785b8b00cbd9c6397c88a806
-
SHA512
07d6eb4b9a136f7a10ca80f50f873c1f87dba8ba36a8c2adf83008a70567a0e32d049b1ee645f33d71d7369c77f33893fe577f5a19966561806d1f42412c9f5b
-
SSDEEP
3072:y0B2rqrKx6Y19PBHEyMwnJ0XfEg3fjuRrl46q:y0yqU96SJAPjutav
Static task
static1
Behavioral task
behavioral1
Sample
d87cbb12038ffa3f7b40e95c435d489ef9c43ffe785b8b00cbd9c6397c88a806.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d87cbb12038ffa3f7b40e95c435d489ef9c43ffe785b8b00cbd9c6397c88a806.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
d87cbb12038ffa3f7b40e95c435d489ef9c43ffe785b8b00cbd9c6397c88a806
-
Size
110KB
-
MD5
b6790b1c698b844b64c465f3513d5163
-
SHA1
ad0042ed1a2a5ed71abb751d63ecb782947808e4
-
SHA256
d87cbb12038ffa3f7b40e95c435d489ef9c43ffe785b8b00cbd9c6397c88a806
-
SHA512
07d6eb4b9a136f7a10ca80f50f873c1f87dba8ba36a8c2adf83008a70567a0e32d049b1ee645f33d71d7369c77f33893fe577f5a19966561806d1f42412c9f5b
-
SSDEEP
3072:y0B2rqrKx6Y19PBHEyMwnJ0XfEg3fjuRrl46q:y0yqU96SJAPjutav
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-