General
-
Target
MDE_File_Sample_7cdcc1d040d89e2df6cdb3c3a038cd1125bbc97b.zip
-
Size
4.8MB
-
Sample
221225-jy4cpsbc56
-
MD5
175f0bc3b82df062ff2640d391c72a77
-
SHA1
3f0e47a6c2a581c19c9ef334ce15de4b75d02246
-
SHA256
562ce347bbe3f64f55eef056b08696ae1e5dba755ea13009582e3ef9809a8991
-
SHA512
907d8e6fdb99c7e9c4abf20f1efa887ae5de94aff12ea2a9c944079b984d546d2100f784e0124a2310bf90f22c8cb2654b7cc4b26ee7c29d1421811295e0f9de
-
SSDEEP
98304:C8FhUvpHEfV9CsV8oWibMjLVUPnybMgvELgcDw9M64BNhI5kTjCPUdF5r:X2pH4zeoWrjLOPnyTegWwK7eMjbFx
Static task
static1
Behavioral task
behavioral1
Sample
MetaStock Real-Time Pro v2.15.exe
Resource
win7-20221111-en
Malware Config
Extracted
vidar
53.8
1142
https://t.me/spmhaus
https://c.im/@tiagoa33
-
profile_id
1142
Targets
-
-
Target
MetaStock Real-Time Pro v2.15.exe
-
Size
469.8MB
-
MD5
a9bc8ccce1c2a06effc09e10fc02d138
-
SHA1
fa066dba4d83c1bbf4e0b50ec12a6c49ed5a3a2c
-
SHA256
6b187987bfbaaa6c3dece380667066c24ebf20885495ad3a7e83163a828a83d0
-
SHA512
c460d3cc1c16277f5a81aeb8f3543fb9bb972859f6b307d33800019ff3930524770b49e29851a6a599a62e08e7b90146a338e35a7b718df519e337175266b108
-
SSDEEP
98304:HTuyZxef8K7xtCril58owLRpC+xPjgs5X:zpyuqxwLXbLXX
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-