General
-
Target
ffe5ba9fcc683bd44977decce8f91e5954391c87d050bb31a63d62a3100f3245
-
Size
3.4MB
-
Sample
230328-r9e39adc7t
-
MD5
3e46f27890325c622f4be046beced31c
-
SHA1
ceda1077c965e194b1ef0f33c623de4905e7d4dd
-
SHA256
ffe5ba9fcc683bd44977decce8f91e5954391c87d050bb31a63d62a3100f3245
-
SHA512
f927e5f4fbc2b74a71bc1c9e6e816d02c26aabdd677b78f68f7f627e9b19ddd688a45e60dcc41f1fc6795eb74d81ee5861e567cc1e4a5fd132ba7af0d16552f0
-
SSDEEP
98304:jUwOIEK84WQsykAeYIkAeYUaMImg8C0QuKYJuR21C/yIq/dhl/O4i/TksjdFwvhm:jUwOIEK84WQsykAeYIkAeYUaMImg8C0s
Static task
static1
Malware Config
Targets
-
-
Target
ffe5ba9fcc683bd44977decce8f91e5954391c87d050bb31a63d62a3100f3245
-
Size
3.4MB
-
MD5
3e46f27890325c622f4be046beced31c
-
SHA1
ceda1077c965e194b1ef0f33c623de4905e7d4dd
-
SHA256
ffe5ba9fcc683bd44977decce8f91e5954391c87d050bb31a63d62a3100f3245
-
SHA512
f927e5f4fbc2b74a71bc1c9e6e816d02c26aabdd677b78f68f7f627e9b19ddd688a45e60dcc41f1fc6795eb74d81ee5861e567cc1e4a5fd132ba7af0d16552f0
-
SSDEEP
98304:jUwOIEK84WQsykAeYIkAeYUaMImg8C0QuKYJuR21C/yIq/dhl/O4i/TksjdFwvhm:jUwOIEK84WQsykAeYIkAeYUaMImg8C0s
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Executes dropped EXE
-
Modifies file permissions
-
Suspicious use of SetThreadContext
-