General
-
Target
Van.7z
-
Size
2.5MB
-
Sample
240903-lbyj2stgpf
-
MD5
8337ba25c923309f2ae7431e0afe1cba
-
SHA1
c2d8f6e742c4274a4bbc5fb641ee29483da49a50
-
SHA256
15fa86cb0fc2faac28d529529ba9e1688f43a87ca6c43e411e247eeafa6959ee
-
SHA512
ff91c9b9617dc58902293b18eba20e2426cf415acbd5b12d068a640a54d12d61e184a034a09f01f87a746800793d5c58ebb25297ecea3cde25cf6c52e1bdc19c
-
SSDEEP
49152:OWq9nz0jf4sTzy8bxx+5apMgLhsa2sxn83uJwhNSJn2iVjD1Z9yHCflVaWjUh:OWq6zX/y8y8pMasa2t32whM7ByHCtVjE
Static task
static1
Behavioral task
behavioral1
Sample
VANGUARD BYPASS.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
VANGUARD BYPASS.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
slayts.1337
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
slayts.1337
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
test.txt
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
test.txt
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
VANGUARD BYPASS.exe
-
Size
2.5MB
-
MD5
2473c143b9591080093561cd3fc42955
-
SHA1
3a65083c411edba6b7a5dcdb93a2bebcc410e95b
-
SHA256
89ee1cbd0ef4390b420dea55744487665d4bf7dcfa2c2597db2984dfad5dff1a
-
SHA512
ae599014de20c34d0b75d938f743dc443b37bbd5095ec4f24548f9cff5a08f48a7959eae0dea070cf5d43d6916a4affe8ff1d825f5d8ab2907f00a9df5a5c334
-
SSDEEP
49152:pXkQq9LDj26Mx1zrHvxx5qaXqQ7hsaNsRBt87lOpSJnQxnDNZGZ8VpDTU2:pXkQqxD8NrHxhXqosaNO8JOY+6OVlU
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
-
Target
slayts.1337
-
Size
1KB
-
MD5
2484c6ffccd87cad1274eca1e0b2ad55
-
SHA1
f83107a0df66ea20706f8a06f1b665025983fca7
-
SHA256
d02430778786d7999b8a91f3071857b3eb3c0f73adfa1dbc024f4a78e59ab37c
-
SHA512
1816eed9d4eebd1393ad2622337eaaadc4ab784a963557e61a6de95dae4eead97797a10899f5a717450092eaea36a936cf5b24712517622b058810bdc0e78316
Score3/10 -
-
-
Target
test.txt
-
Size
1B
-
MD5
c4ca4238a0b923820dcc509a6f75849b
-
SHA1
356a192b7913b04c54574d18c28d46e6395428ab
-
SHA256
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
-
SHA512
4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
Score1/10 -