General
-
Target
996e186ba608ba27f653d3aed739409ef63975305762582d64b8d5b0a1de95a1
-
Size
12.3MB
-
Sample
240523-fmwlyaee76
-
MD5
294e8b28cb6d1ff9e57d4f82d696b800
-
SHA1
b205734e67213dc440f47786e51029dfb0ddf6bc
-
SHA256
996e186ba608ba27f653d3aed739409ef63975305762582d64b8d5b0a1de95a1
-
SHA512
7d21a1715f16ed290149c13d89e553e47e11e54a57b474091cf9b8858383649511f2f3fece8014f1322c7982b3c0b2166bcd767644b913490c525954faeeecc5
-
SSDEEP
393216:ymtxYM6QuPQDYhB3lijQyhAY/TxhsMf2Ky4OAvIp:fOM6pYDWDaQyhAY7Ic2KKT
Static task
static1
Behavioral task
behavioral1
Sample
996e186ba608ba27f653d3aed739409ef63975305762582d64b8d5b0a1de95a1.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
996e186ba608ba27f653d3aed739409ef63975305762582d64b8d5b0a1de95a1.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
996e186ba608ba27f653d3aed739409ef63975305762582d64b8d5b0a1de95a1
-
Size
12.3MB
-
MD5
294e8b28cb6d1ff9e57d4f82d696b800
-
SHA1
b205734e67213dc440f47786e51029dfb0ddf6bc
-
SHA256
996e186ba608ba27f653d3aed739409ef63975305762582d64b8d5b0a1de95a1
-
SHA512
7d21a1715f16ed290149c13d89e553e47e11e54a57b474091cf9b8858383649511f2f3fece8014f1322c7982b3c0b2166bcd767644b913490c525954faeeecc5
-
SSDEEP
393216:ymtxYM6QuPQDYhB3lijQyhAY/TxhsMf2Ky4OAvIp:fOM6pYDWDaQyhAY7Ic2KKT
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-