General
-
Target
VTYaQsAA0Hei.exe
-
Size
5.8MB
-
Sample
230917-zscwkafc29
-
MD5
284fb670fe2bc13889345537218dc883
-
SHA1
6a0f9bf98ae4417fbad3681bc57e7f795e40b160
-
SHA256
707d8b322b6ae7c70344034b7802b1ddcca766114425f9ae212bc79394cb4aeb
-
SHA512
9f3b34b97dc56622cafe89fc1f913a9ce61a43c4ac7fa65b1a0f229289fe8e139f8163953be6bb924d2909ed2c707d2b6552c06596bf1097ea665fd6e5935bcf
-
SSDEEP
98304:irb/nXZD75WXGVuJB1687EcfM6tQ1DmcJSLROcZbVO3WS8iWQNekngFVDXnd:irb/nXhtFm68rfRt4mGSLR/ZEmSdNZgB
Static task
static1
Behavioral task
behavioral1
Sample
VTYaQsAA0Hei.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
VTYaQsAA0Hei.exe
-
Size
5.8MB
-
MD5
284fb670fe2bc13889345537218dc883
-
SHA1
6a0f9bf98ae4417fbad3681bc57e7f795e40b160
-
SHA256
707d8b322b6ae7c70344034b7802b1ddcca766114425f9ae212bc79394cb4aeb
-
SHA512
9f3b34b97dc56622cafe89fc1f913a9ce61a43c4ac7fa65b1a0f229289fe8e139f8163953be6bb924d2909ed2c707d2b6552c06596bf1097ea665fd6e5935bcf
-
SSDEEP
98304:irb/nXZD75WXGVuJB1687EcfM6tQ1DmcJSLROcZbVO3WS8iWQNekngFVDXnd:irb/nXhtFm68rfRt4mGSLR/ZEmSdNZgB
Score8/10-
Looks for VMWare services registry key.
-