General
-
Target
069bce41da2b518b9ccab68344b7ff318baf22f00e8d5cc34998ace81da778e4
-
Size
2.3MB
-
Sample
240608-z9paxsge51
-
MD5
77b94ce5d0f9a2576bae3dfe3ec275d1
-
SHA1
c2b3e7c0a6cead3e193d058163282fe631f0571c
-
SHA256
069bce41da2b518b9ccab68344b7ff318baf22f00e8d5cc34998ace81da778e4
-
SHA512
ae77c8f66bc7c522712fdaffa74d94a23c411338cfa75d60a9ff9aa693542b51d0d9b94c975fa0883e69d4f4346d863e1a1df61e1c3404586223f31c757d2419
-
SSDEEP
49152:9WcTGHj+jPh0naPI6uZ7M9vLUKg0pyDtv29APeq6jgSIj1ZQp:9qHj+jPhoaPIlZ7M9hgbt+9APzJSIHQp
Static task
static1
Behavioral task
behavioral1
Sample
069bce41da2b518b9ccab68344b7ff318baf22f00e8d5cc34998ace81da778e4.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
risepro
147.45.47.126:58709
Targets
-
-
Target
069bce41da2b518b9ccab68344b7ff318baf22f00e8d5cc34998ace81da778e4
-
Size
2.3MB
-
MD5
77b94ce5d0f9a2576bae3dfe3ec275d1
-
SHA1
c2b3e7c0a6cead3e193d058163282fe631f0571c
-
SHA256
069bce41da2b518b9ccab68344b7ff318baf22f00e8d5cc34998ace81da778e4
-
SHA512
ae77c8f66bc7c522712fdaffa74d94a23c411338cfa75d60a9ff9aa693542b51d0d9b94c975fa0883e69d4f4346d863e1a1df61e1c3404586223f31c757d2419
-
SSDEEP
49152:9WcTGHj+jPh0naPI6uZ7M9vLUKg0pyDtv29APeq6jgSIj1ZQp:9qHj+jPhoaPIlZ7M9hgbt+9APzJSIHQp
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-