General
-
Target
850b6bf6102cec3c6821b7753ec37427a5747db094cfef45208fa7a5d14a3208
-
Size
3.4MB
-
Sample
230328-pmg8zscf3z
-
MD5
cb9914d5ff7900309c68143bf2d314e3
-
SHA1
a625ca5fdc8bdcba577291769316f863d833f4a2
-
SHA256
850b6bf6102cec3c6821b7753ec37427a5747db094cfef45208fa7a5d14a3208
-
SHA512
5ef92ba3e28645f2e8606a6e9cf9131138408cd00b7f3a4c60e9fd4b449b22d1ff317e23fd511fb056167d76670edea4652675cc084430fa197d0f22d37eb33b
-
SSDEEP
98304:OUwOIEK84WQsykAeYIkAeYUaMImg8C0Quy6JuR21C/yIq/dhl/O4i/TksjdFwvhm:OUwOIEK84WQsykAeYIkAeYUaMImg8C00
Static task
static1
Malware Config
Targets
-
-
Target
850b6bf6102cec3c6821b7753ec37427a5747db094cfef45208fa7a5d14a3208
-
Size
3.4MB
-
MD5
cb9914d5ff7900309c68143bf2d314e3
-
SHA1
a625ca5fdc8bdcba577291769316f863d833f4a2
-
SHA256
850b6bf6102cec3c6821b7753ec37427a5747db094cfef45208fa7a5d14a3208
-
SHA512
5ef92ba3e28645f2e8606a6e9cf9131138408cd00b7f3a4c60e9fd4b449b22d1ff317e23fd511fb056167d76670edea4652675cc084430fa197d0f22d37eb33b
-
SSDEEP
98304:OUwOIEK84WQsykAeYIkAeYUaMImg8C0Quy6JuR21C/yIq/dhl/O4i/TksjdFwvhm:OUwOIEK84WQsykAeYIkAeYUaMImg8C00
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Executes dropped EXE
-
Modifies file permissions
-
Suspicious use of SetThreadContext
-