General
-
Target
73af0b9b7f307488445db0ec14597fbe91467c1fdd973a39c59c1e2bc7809de2
-
Size
3.8MB
-
Sample
240523-z3g82agg8t
-
MD5
57b8ed83826856318137c44fb1240528
-
SHA1
679ac8ba7651908d6b9abd37624829d264d63d3d
-
SHA256
73af0b9b7f307488445db0ec14597fbe91467c1fdd973a39c59c1e2bc7809de2
-
SHA512
397bb732162bb65d0c8b6ae267389eb7df4ba8bacedc84eebf709413f43e117aeccd10095152848502248953b86b244ed12ba5a7ccda3e3a41c002e5656c8f77
-
SSDEEP
98304:DPlBE1PNDpE44FcH8RNy2lqBehp4t/d6ZCRMi3ivzz:ZqP/yFcH8Ro2W6KVfyvzz
Behavioral task
behavioral1
Sample
73af0b9b7f307488445db0ec14597fbe91467c1fdd973a39c59c1e2bc7809de2.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
73af0b9b7f307488445db0ec14597fbe91467c1fdd973a39c59c1e2bc7809de2
-
Size
3.8MB
-
MD5
57b8ed83826856318137c44fb1240528
-
SHA1
679ac8ba7651908d6b9abd37624829d264d63d3d
-
SHA256
73af0b9b7f307488445db0ec14597fbe91467c1fdd973a39c59c1e2bc7809de2
-
SHA512
397bb732162bb65d0c8b6ae267389eb7df4ba8bacedc84eebf709413f43e117aeccd10095152848502248953b86b244ed12ba5a7ccda3e3a41c002e5656c8f77
-
SSDEEP
98304:DPlBE1PNDpE44FcH8RNy2lqBehp4t/d6ZCRMi3ivzz:ZqP/yFcH8Ro2W6KVfyvzz
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-