General
-
Target
X07.exe
-
Size
44.6MB
-
Sample
240727-b9a7asyhrp
-
MD5
3c9e2d2138a990aed5361f44cf60cdad
-
SHA1
fb22fee3c0432464f692d71c8cf0f26fc524a2b8
-
SHA256
c9702b31b7b477edfa4ebba4453290117bc36ef406429dc3f5aedd08a125e53d
-
SHA512
27b25113e05a79644219e603cbc191cfa98a690ff73e6a1bb545d03d1d3544f2ac51cade4d32a697147bf48d3ddccbdc9e6e61487f562a6e68cde0c54dc4fdb5
-
SSDEEP
786432:37aCw84eTTO787R02hRXKVbGifrygSf8zyIMf3yQHWsWNNzhZDgt:37jw844W2hRXqG0ry4zMfCQ2jZD
Static task
static1
Behavioral task
behavioral1
Sample
X07.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
X07.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
X07.exe
-
Size
44.6MB
-
MD5
3c9e2d2138a990aed5361f44cf60cdad
-
SHA1
fb22fee3c0432464f692d71c8cf0f26fc524a2b8
-
SHA256
c9702b31b7b477edfa4ebba4453290117bc36ef406429dc3f5aedd08a125e53d
-
SHA512
27b25113e05a79644219e603cbc191cfa98a690ff73e6a1bb545d03d1d3544f2ac51cade4d32a697147bf48d3ddccbdc9e6e61487f562a6e68cde0c54dc4fdb5
-
SSDEEP
786432:37aCw84eTTO787R02hRXKVbGifrygSf8zyIMf3yQHWsWNNzhZDgt:37jw844W2hRXqG0ry4zMfCQ2jZD
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-