General
-
Target
205d8adc527eef259984085bea5aee9c2129fb321d3bb80503d3457cd0ab1e16
-
Size
3.4MB
-
Sample
230328-qw645sch9t
-
MD5
24b4ad114be2813d0eeeecd23c56899b
-
SHA1
9b3d66feb0248fc863c6aefc9204cc40aef76eca
-
SHA256
205d8adc527eef259984085bea5aee9c2129fb321d3bb80503d3457cd0ab1e16
-
SHA512
7ddbecd1607debe949454f84121c9d2798b2d0280be82ce992a5e8c85f835f107adcde6198d323074d8e98d8084f6866c780dc6b3c867b160c29cb76c9b7d27d
-
SSDEEP
98304:RUwOIEK84WQsykAeYYkAeYUaMImg8C0QunAJuR21C/yIq/dhl/O4i/TksjdFwvhW:RUwOIEK84WQsykAeYYkAeYUaMImg8C0v
Static task
static1
Malware Config
Targets
-
-
Target
205d8adc527eef259984085bea5aee9c2129fb321d3bb80503d3457cd0ab1e16
-
Size
3.4MB
-
MD5
24b4ad114be2813d0eeeecd23c56899b
-
SHA1
9b3d66feb0248fc863c6aefc9204cc40aef76eca
-
SHA256
205d8adc527eef259984085bea5aee9c2129fb321d3bb80503d3457cd0ab1e16
-
SHA512
7ddbecd1607debe949454f84121c9d2798b2d0280be82ce992a5e8c85f835f107adcde6198d323074d8e98d8084f6866c780dc6b3c867b160c29cb76c9b7d27d
-
SSDEEP
98304:RUwOIEK84WQsykAeYYkAeYUaMImg8C0QunAJuR21C/yIq/dhl/O4i/TksjdFwvhW:RUwOIEK84WQsykAeYYkAeYUaMImg8C0v
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Executes dropped EXE
-
Modifies file permissions
-
Suspicious use of SetThreadContext
-