General
-
Target
fc0ba6072ccaa40e2bbe56b6977253d5598307f321b46f1e4110ec78824b8b1a
-
Size
14.7MB
-
Sample
240522-thjngagf23
-
MD5
673ca0155ec86907b712fb0030e159ec
-
SHA1
7f86f7dfb23e12e769698e965f993ca18b22816a
-
SHA256
fc0ba6072ccaa40e2bbe56b6977253d5598307f321b46f1e4110ec78824b8b1a
-
SHA512
3c6820fa8a07913f441171bb4dbedbe28b50a374e0c028cc8c26e4e3bb77483ce2f3cb4e5cc04547c9ef95ffa2239175b6c8854d08b6c4b27338b8d4151d0d53
-
SSDEEP
393216:NZXj7p0jyvPkm/gTeXkFs5Iea+xF+1QGvZHrf:NZzFBv86UFyIw+1Qspf
Behavioral task
behavioral1
Sample
fc0ba6072ccaa40e2bbe56b6977253d5598307f321b46f1e4110ec78824b8b1a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fc0ba6072ccaa40e2bbe56b6977253d5598307f321b46f1e4110ec78824b8b1a.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
fc0ba6072ccaa40e2bbe56b6977253d5598307f321b46f1e4110ec78824b8b1a
-
Size
14.7MB
-
MD5
673ca0155ec86907b712fb0030e159ec
-
SHA1
7f86f7dfb23e12e769698e965f993ca18b22816a
-
SHA256
fc0ba6072ccaa40e2bbe56b6977253d5598307f321b46f1e4110ec78824b8b1a
-
SHA512
3c6820fa8a07913f441171bb4dbedbe28b50a374e0c028cc8c26e4e3bb77483ce2f3cb4e5cc04547c9ef95ffa2239175b6c8854d08b6c4b27338b8d4151d0d53
-
SSDEEP
393216:NZXj7p0jyvPkm/gTeXkFs5Iea+xF+1QGvZHrf:NZzFBv86UFyIw+1Qspf
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-