General
-
Target
0e6d8032c24586efa076ab79333235ee6e1e5b8c1ad714133009e7b63dee85f5
-
Size
8.9MB
-
Sample
240522-pn1rqabe7t
-
MD5
b26c2c671fbd6fba5c112388d6d5ca9b
-
SHA1
d9bbbd99bfd8c475a2f63b5516d4ffda8924d86a
-
SHA256
0e6d8032c24586efa076ab79333235ee6e1e5b8c1ad714133009e7b63dee85f5
-
SHA512
2dbd52384213a85f6964af8ffffd63043ab109f0df2cbd1cc80d3aec6a27ec5a64a4ddca08caa4e74b411892826cc5fd2a5f8f434a1b057ee439ae473b1f68bc
-
SSDEEP
196608:kcjkKJQZlRhd3mJyuQGH2HL67CnsYqN1GUEFZQfUOiKYP66fXG:kWEpdRu0HL6GnsBGU2dwYP66PG
Behavioral task
behavioral1
Sample
0e6d8032c24586efa076ab79333235ee6e1e5b8c1ad714133009e7b63dee85f5.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
0e6d8032c24586efa076ab79333235ee6e1e5b8c1ad714133009e7b63dee85f5
-
Size
8.9MB
-
MD5
b26c2c671fbd6fba5c112388d6d5ca9b
-
SHA1
d9bbbd99bfd8c475a2f63b5516d4ffda8924d86a
-
SHA256
0e6d8032c24586efa076ab79333235ee6e1e5b8c1ad714133009e7b63dee85f5
-
SHA512
2dbd52384213a85f6964af8ffffd63043ab109f0df2cbd1cc80d3aec6a27ec5a64a4ddca08caa4e74b411892826cc5fd2a5f8f434a1b057ee439ae473b1f68bc
-
SSDEEP
196608:kcjkKJQZlRhd3mJyuQGH2HL67CnsYqN1GUEFZQfUOiKYP66fXG:kWEpdRu0HL6GnsBGU2dwYP66PG
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-