General
-
Target
08fcd79e830f0e8db766a40127e9b96b02ecfe143f2d9f155b47ed1597281c98
-
Size
2.3MB
-
Sample
240428-hxwqssae99
-
MD5
e6f8461eb8c185f65ba1bf5a11c2e76b
-
SHA1
ddece89ea5b41b8cebc610911ea9e1e0df23cbdc
-
SHA256
08fcd79e830f0e8db766a40127e9b96b02ecfe143f2d9f155b47ed1597281c98
-
SHA512
774f6a02865aaba567e3dba2647d7e86a192ecfca26d86bcfc8a8f0259206afe95f6c7f4259fb3eea7d6a26ac1d233f4dba3ccd10c24832f149f993c3a83a9a3
-
SSDEEP
49152:9g69SebPPiKgYy1ByBKnmq//apJ0nHcQhp48oV2td9CJRHcpe/1h:9g69SebijQBKnmq/ypUH7U8bd9Gse/H
Static task
static1
Behavioral task
behavioral1
Sample
08fcd79e830f0e8db766a40127e9b96b02ecfe143f2d9f155b47ed1597281c98.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
08fcd79e830f0e8db766a40127e9b96b02ecfe143f2d9f155b47ed1597281c98
-
Size
2.3MB
-
MD5
e6f8461eb8c185f65ba1bf5a11c2e76b
-
SHA1
ddece89ea5b41b8cebc610911ea9e1e0df23cbdc
-
SHA256
08fcd79e830f0e8db766a40127e9b96b02ecfe143f2d9f155b47ed1597281c98
-
SHA512
774f6a02865aaba567e3dba2647d7e86a192ecfca26d86bcfc8a8f0259206afe95f6c7f4259fb3eea7d6a26ac1d233f4dba3ccd10c24832f149f993c3a83a9a3
-
SSDEEP
49152:9g69SebPPiKgYy1ByBKnmq//apJ0nHcQhp48oV2td9CJRHcpe/1h:9g69SebijQBKnmq/ypUH7U8bd9Gse/H
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-