General
-
Target
47990b868f36f344a0f8bc210611103d2bacd4cb5e95a787381e9829fda23ec6
-
Size
5.6MB
-
Sample
240523-3ryy7adf7x
-
MD5
12ea2388ee725602ab8719a96127f124
-
SHA1
32f675a796cf375053b4d4a4eb355be877d29199
-
SHA256
47990b868f36f344a0f8bc210611103d2bacd4cb5e95a787381e9829fda23ec6
-
SHA512
9fa2a47b7374dad5d67e06b22d904f303a9afa660f7fa7520025021329fb09d234b16aa55a9d899d9e92f4a37b927cea6724d53bc283cdfc13630b37e171de0d
-
SSDEEP
98304:YOoiC1KRCpNxx1a0Nu9bmha6E3NlJq/A+VOWkpiGhR7vE6Az3xI8ZI/J:YhiKgCpNxx1o9J6E3NrafOB5hJczPZIR
Static task
static1
Behavioral task
behavioral1
Sample
47990b868f36f344a0f8bc210611103d2bacd4cb5e95a787381e9829fda23ec6.exe
Resource
win7-20240215-en
Malware Config
Targets
-
-
Target
47990b868f36f344a0f8bc210611103d2bacd4cb5e95a787381e9829fda23ec6
-
Size
5.6MB
-
MD5
12ea2388ee725602ab8719a96127f124
-
SHA1
32f675a796cf375053b4d4a4eb355be877d29199
-
SHA256
47990b868f36f344a0f8bc210611103d2bacd4cb5e95a787381e9829fda23ec6
-
SHA512
9fa2a47b7374dad5d67e06b22d904f303a9afa660f7fa7520025021329fb09d234b16aa55a9d899d9e92f4a37b927cea6724d53bc283cdfc13630b37e171de0d
-
SSDEEP
98304:YOoiC1KRCpNxx1a0Nu9bmha6E3NlJq/A+VOWkpiGhR7vE6Az3xI8ZI/J:YhiKgCpNxx1o9J6E3NrafOB5hJczPZIR
-
Detect Blackmoon payload
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-