General
-
Target
48335dc55ff05f9a4ee3e06804d017b03c3a5784a245438c88f628e01230505a
-
Size
2.2MB
-
Sample
240415-jpeb8ahh35
-
MD5
e0b44bc3827bb5654ef5859147b70eac
-
SHA1
452b46693cc19a1a0e84d56d4f4df9b498356b16
-
SHA256
48335dc55ff05f9a4ee3e06804d017b03c3a5784a245438c88f628e01230505a
-
SHA512
750c3b8feed64230224973b52ccbce0404fe9dad8fb22d92bf06f4c745e02a247e15a437bd6b1346f02c87dc683cc978405b940cf9e72a8a9328af4eb7f5a5b6
-
SSDEEP
49152:HSUl6vD5DxN6HHLJFw5tLV4mkpXXC1qwJFiPZH1sdpUKXE3xSGnr:HSSwD5DxkkLV1kpXXC17MF1sdpUKXE3V
Static task
static1
Behavioral task
behavioral1
Sample
48335dc55ff05f9a4ee3e06804d017b03c3a5784a245438c88f628e01230505a.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
risepro
147.45.47.93:58709
Targets
-
-
Target
48335dc55ff05f9a4ee3e06804d017b03c3a5784a245438c88f628e01230505a
-
Size
2.2MB
-
MD5
e0b44bc3827bb5654ef5859147b70eac
-
SHA1
452b46693cc19a1a0e84d56d4f4df9b498356b16
-
SHA256
48335dc55ff05f9a4ee3e06804d017b03c3a5784a245438c88f628e01230505a
-
SHA512
750c3b8feed64230224973b52ccbce0404fe9dad8fb22d92bf06f4c745e02a247e15a437bd6b1346f02c87dc683cc978405b940cf9e72a8a9328af4eb7f5a5b6
-
SSDEEP
49152:HSUl6vD5DxN6HHLJFw5tLV4mkpXXC1qwJFiPZH1sdpUKXE3xSGnr:HSSwD5DxkkLV1kpXXC17MF1sdpUKXE3V
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-