General
-
Target
dbda4ac43fd3229bf27e2ecc717d3e4e209a96141ea435827d758fd228b4e930
-
Size
3.4MB
-
Sample
230328-p6khfsbb38
-
MD5
dedbb409a4b50fc2de893b46028b31f4
-
SHA1
7c94b552d89580d0eed1662ff52cc2fd9223ac4f
-
SHA256
dbda4ac43fd3229bf27e2ecc717d3e4e209a96141ea435827d758fd228b4e930
-
SHA512
c82b7d274893c83c9e86f8f316ba95d35bdb0c98009169fe0a3e583e008e6c30ccace9e639634708d6e1c0cc1f4317550bcabdeed2186e144b1a9f4a589ac5d6
-
SSDEEP
98304:fUwOIEK84WQsykAeYXkAeYUaMImg8C0QuQYJuR21C/yIq/dhl/O4i/TksjdFwvh9:fUwOIEK84WQsykAeYXkAeYUaMImg8C0b
Static task
static1
Malware Config
Targets
-
-
Target
dbda4ac43fd3229bf27e2ecc717d3e4e209a96141ea435827d758fd228b4e930
-
Size
3.4MB
-
MD5
dedbb409a4b50fc2de893b46028b31f4
-
SHA1
7c94b552d89580d0eed1662ff52cc2fd9223ac4f
-
SHA256
dbda4ac43fd3229bf27e2ecc717d3e4e209a96141ea435827d758fd228b4e930
-
SHA512
c82b7d274893c83c9e86f8f316ba95d35bdb0c98009169fe0a3e583e008e6c30ccace9e639634708d6e1c0cc1f4317550bcabdeed2186e144b1a9f4a589ac5d6
-
SSDEEP
98304:fUwOIEK84WQsykAeYXkAeYUaMImg8C0QuQYJuR21C/yIq/dhl/O4i/TksjdFwvh9:fUwOIEK84WQsykAeYXkAeYUaMImg8C0b
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Executes dropped EXE
-
Modifies file permissions
-
Suspicious use of SetThreadContext
-