General
-
Target
c6c57a03e14a28572a697f156f97ed5ac60663ec1271c754756dd335b21e9fed
-
Size
6.6MB
-
Sample
240523-e9k82seb37
-
MD5
02a7189dbb81604690c8bac9f0946557
-
SHA1
605863a7426bc3207ea2bf7d7b01ce06f0edfd8e
-
SHA256
c6c57a03e14a28572a697f156f97ed5ac60663ec1271c754756dd335b21e9fed
-
SHA512
4c2812b2a1f73cc90fd3b86adf9533a0af2c1e86f282c8ca8ab977ff87fbb5ebdc36f4d3524022f447239fbb2045eb61e37c2f8ad3863edd2dedad1bc368c6e2
-
SSDEEP
98304:MAUH/O2fXSA57UpdRCufM4aJGTbbIl1+LxF7cg2CGABvoVPyuqyACXfTFY1uIb:MAUHl557ZucJI/xag9ckyRLmhb
Behavioral task
behavioral1
Sample
c6c57a03e14a28572a697f156f97ed5ac60663ec1271c754756dd335b21e9fed.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
c6c57a03e14a28572a697f156f97ed5ac60663ec1271c754756dd335b21e9fed
-
Size
6.6MB
-
MD5
02a7189dbb81604690c8bac9f0946557
-
SHA1
605863a7426bc3207ea2bf7d7b01ce06f0edfd8e
-
SHA256
c6c57a03e14a28572a697f156f97ed5ac60663ec1271c754756dd335b21e9fed
-
SHA512
4c2812b2a1f73cc90fd3b86adf9533a0af2c1e86f282c8ca8ab977ff87fbb5ebdc36f4d3524022f447239fbb2045eb61e37c2f8ad3863edd2dedad1bc368c6e2
-
SSDEEP
98304:MAUH/O2fXSA57UpdRCufM4aJGTbbIl1+LxF7cg2CGABvoVPyuqyACXfTFY1uIb:MAUHl557ZucJI/xag9ckyRLmhb
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-