General
-
Target
7ec3a7beaf7126d2fd6c88031784a5edce2a5de0107b7d22678fd6f8f73e1a19
-
Size
2.3MB
-
Sample
230531-3cbv4sbh9z
-
MD5
d2d03afd6d7f23a22674c92dcbdd8e4e
-
SHA1
355be5aca938caa3ddb6a2ae3d799a9f028df930
-
SHA256
7ec3a7beaf7126d2fd6c88031784a5edce2a5de0107b7d22678fd6f8f73e1a19
-
SHA512
1ef5a57db6a5fdf69549928f671a71b6758a00b04562a30b6c5dbfd6f95a6827cbf467a894c761339a4ca5d3856c1aae953bec37f6a53632af55ba613e3e74c2
-
SSDEEP
49152:JsyR4hWncde0CrC2ggUaFBX8xfh/QQANUKFhmw+jMP5S9WfiNSZt+ra0:mW4REHPlcxfhYrt7ygP5aWqNat+ra0
Static task
static1
Behavioral task
behavioral1
Sample
7ec3a7beaf7126d2fd6c88031784a5edce2a5de0107b7d22678fd6f8f73e1a19.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
7ec3a7beaf7126d2fd6c88031784a5edce2a5de0107b7d22678fd6f8f73e1a19
-
Size
2.3MB
-
MD5
d2d03afd6d7f23a22674c92dcbdd8e4e
-
SHA1
355be5aca938caa3ddb6a2ae3d799a9f028df930
-
SHA256
7ec3a7beaf7126d2fd6c88031784a5edce2a5de0107b7d22678fd6f8f73e1a19
-
SHA512
1ef5a57db6a5fdf69549928f671a71b6758a00b04562a30b6c5dbfd6f95a6827cbf467a894c761339a4ca5d3856c1aae953bec37f6a53632af55ba613e3e74c2
-
SSDEEP
49152:JsyR4hWncde0CrC2ggUaFBX8xfh/QQANUKFhmw+jMP5S9WfiNSZt+ra0:mW4REHPlcxfhYrt7ygP5aWqNat+ra0
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-