General
-
Target
29f003a446960afbdfa41627103f8d1280d422ff7444efb1de0e0a6265a85311
-
Size
3.4MB
-
Sample
240614-x265nawgrl
-
MD5
5802280eca5e20a43e17d62323b7ee2d
-
SHA1
846c93bb429bfefbb272cea0efa1dfaa3870b56e
-
SHA256
29f003a446960afbdfa41627103f8d1280d422ff7444efb1de0e0a6265a85311
-
SHA512
77077e1004b5d5016ebf2459e8ff928c0830821d5d7164ec898b397152f0d901dce05eb6174b71815ef1b834294b71484daf1694da2d9d604e0336a7a5d0bd2d
-
SSDEEP
98304:ZwciVlmB/yJM/yyzv1//VtzhG2rz8/9YHZz/N:ZwROyJqrvFEw4u5Z
Static task
static1
Behavioral task
behavioral1
Sample
29f003a446960afbdfa41627103f8d1280d422ff7444efb1de0e0a6265a85311.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
29f003a446960afbdfa41627103f8d1280d422ff7444efb1de0e0a6265a85311.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
29f003a446960afbdfa41627103f8d1280d422ff7444efb1de0e0a6265a85311
-
Size
3.4MB
-
MD5
5802280eca5e20a43e17d62323b7ee2d
-
SHA1
846c93bb429bfefbb272cea0efa1dfaa3870b56e
-
SHA256
29f003a446960afbdfa41627103f8d1280d422ff7444efb1de0e0a6265a85311
-
SHA512
77077e1004b5d5016ebf2459e8ff928c0830821d5d7164ec898b397152f0d901dce05eb6174b71815ef1b834294b71484daf1694da2d9d604e0336a7a5d0bd2d
-
SSDEEP
98304:ZwciVlmB/yJM/yyzv1//VtzhG2rz8/9YHZz/N:ZwROyJqrvFEw4u5Z
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-