General
-
Target
untitled folder.zip
-
Size
51.8MB
-
Sample
240526-q5kmhahd93
-
MD5
484e3e4187cb45a7b889b85eb62fa624
-
SHA1
74ff05961fe93cc2c83999fa4eba975d4ae149fb
-
SHA256
7cb5aae5ef9bcedda1c94364492a92a07993270c0a8dedc359fee93a363d4ab5
-
SHA512
d0645e2872cf35266cc1be2ccc825c2873cfc9b6dad04c5ebb307bf4e577ff380969e22a17691706f0f4e18829dc6a39c77dba99b4d05e67fa6355c4d6749dcb
-
SSDEEP
1572864:pHbHPMbfsVwZTx9PuPl/Fjq1ADsPUyoa+IxDeAsArSZGab:hH8jx90Fq1wUNheAPaGY
Behavioral task
behavioral1
Sample
untitled folder.zip
Resource
win11-20240508-en
Malware Config
Targets
-
-
Target
untitled folder.zip
-
Size
51.8MB
-
MD5
484e3e4187cb45a7b889b85eb62fa624
-
SHA1
74ff05961fe93cc2c83999fa4eba975d4ae149fb
-
SHA256
7cb5aae5ef9bcedda1c94364492a92a07993270c0a8dedc359fee93a363d4ab5
-
SHA512
d0645e2872cf35266cc1be2ccc825c2873cfc9b6dad04c5ebb307bf4e577ff380969e22a17691706f0f4e18829dc6a39c77dba99b4d05e67fa6355c4d6749dcb
-
SSDEEP
1572864:pHbHPMbfsVwZTx9PuPl/Fjq1ADsPUyoa+IxDeAsArSZGab:hH8jx90Fq1wUNheAPaGY
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-