General
-
Target
9207ab2a3c6535602da48fa9acf4c621f73ec83de33c706bd90cfd3c6af66f46
-
Size
3.4MB
-
Sample
230328-gqe9sshb86
-
MD5
983273e5eafcda86d2a5e566d3563862
-
SHA1
fb0a250df1c52ff6997933b57d5c72b8f6de3408
-
SHA256
9207ab2a3c6535602da48fa9acf4c621f73ec83de33c706bd90cfd3c6af66f46
-
SHA512
bbf06ffe5e7e42ec882ecba11356b1073fa86c75f467a23b41d603c237e6dc7f893d417a403c8ed84936e34b7188e2ac5341d822faac2b2985bbff134a99cb14
-
SSDEEP
98304:NJuR21C/yIq/dhl/O4i/TksjdFwvhzjMSwRVq:N8D/yIqlhlW4i/QsnwZzjMSeVq
Static task
static1
Malware Config
Targets
-
-
Target
9207ab2a3c6535602da48fa9acf4c621f73ec83de33c706bd90cfd3c6af66f46
-
Size
3.4MB
-
MD5
983273e5eafcda86d2a5e566d3563862
-
SHA1
fb0a250df1c52ff6997933b57d5c72b8f6de3408
-
SHA256
9207ab2a3c6535602da48fa9acf4c621f73ec83de33c706bd90cfd3c6af66f46
-
SHA512
bbf06ffe5e7e42ec882ecba11356b1073fa86c75f467a23b41d603c237e6dc7f893d417a403c8ed84936e34b7188e2ac5341d822faac2b2985bbff134a99cb14
-
SSDEEP
98304:NJuR21C/yIq/dhl/O4i/TksjdFwvhzjMSwRVq:N8D/yIqlhlW4i/QsnwZzjMSeVq
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Executes dropped EXE
-
Modifies file permissions
-
Suspicious use of SetThreadContext
-