General
-
Target
245b464650c8a6c7396b99d4dd6a6d631932af70607c9e5cf9e3b5362ef8d086
-
Size
6.4MB
-
Sample
240526-mzqd1sge57
-
MD5
59fdc03c70e968168f75f69a09697ffa
-
SHA1
0c27070175e48a52577b80f7eac50e2657547d2b
-
SHA256
245b464650c8a6c7396b99d4dd6a6d631932af70607c9e5cf9e3b5362ef8d086
-
SHA512
00f3fe1c2650e517d73894cae5d542d9d92ccbacf547581cf9c208f2ff4f2665787eb252ec6e771549a8640ab6a8c074b3c31acad35dc40eef7df8fa256e2a7b
-
SSDEEP
196608:YjQoozTRinzSWJn3SwyidC5fh1nlCJk/q4z:YBoBUzdCwyiC5Z1K4z
Static task
static1
Behavioral task
behavioral1
Sample
245b464650c8a6c7396b99d4dd6a6d631932af70607c9e5cf9e3b5362ef8d086.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
245b464650c8a6c7396b99d4dd6a6d631932af70607c9e5cf9e3b5362ef8d086.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
245b464650c8a6c7396b99d4dd6a6d631932af70607c9e5cf9e3b5362ef8d086
-
Size
6.4MB
-
MD5
59fdc03c70e968168f75f69a09697ffa
-
SHA1
0c27070175e48a52577b80f7eac50e2657547d2b
-
SHA256
245b464650c8a6c7396b99d4dd6a6d631932af70607c9e5cf9e3b5362ef8d086
-
SHA512
00f3fe1c2650e517d73894cae5d542d9d92ccbacf547581cf9c208f2ff4f2665787eb252ec6e771549a8640ab6a8c074b3c31acad35dc40eef7df8fa256e2a7b
-
SSDEEP
196608:YjQoozTRinzSWJn3SwyidC5fh1nlCJk/q4z:YBoBUzdCwyiC5Z1K4z
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-