General
-
Target
c17ce59eabd21804b2c45c1c175fa11560c335f9bc26b9f6dc3a6a84c9bc1086
-
Size
2.3MB
-
Sample
240427-kgjgmseh74
-
MD5
66e6f75ae0ed0e7558e18299753241e6
-
SHA1
58a19ee854ad62f79a64ed375faa663c2bdc7c80
-
SHA256
c17ce59eabd21804b2c45c1c175fa11560c335f9bc26b9f6dc3a6a84c9bc1086
-
SHA512
e328dbac8cfab28b076f6e90f24a2ad6390c7651d31e2f8b4e5bbd47b348cbd7fc2e558389a5cf10c3c8397af9634fd8a4856b8b3647ffc5a4c984bae133d689
-
SSDEEP
49152:zg69SebPPiKgYyopL2L7r//6U8ILnxbv7fskmx27dZPnRx:zg69SebiA2jzLxLokmIPvRx
Static task
static1
Behavioral task
behavioral1
Sample
c17ce59eabd21804b2c45c1c175fa11560c335f9bc26b9f6dc3a6a84c9bc1086.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
c17ce59eabd21804b2c45c1c175fa11560c335f9bc26b9f6dc3a6a84c9bc1086
-
Size
2.3MB
-
MD5
66e6f75ae0ed0e7558e18299753241e6
-
SHA1
58a19ee854ad62f79a64ed375faa663c2bdc7c80
-
SHA256
c17ce59eabd21804b2c45c1c175fa11560c335f9bc26b9f6dc3a6a84c9bc1086
-
SHA512
e328dbac8cfab28b076f6e90f24a2ad6390c7651d31e2f8b4e5bbd47b348cbd7fc2e558389a5cf10c3c8397af9634fd8a4856b8b3647ffc5a4c984bae133d689
-
SSDEEP
49152:zg69SebPPiKgYyopL2L7r//6U8ILnxbv7fskmx27dZPnRx:zg69SebiA2jzLxLokmIPvRx
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-