General
-
Target
JQXl0lEJMWhz.exe
-
Size
13.9MB
-
Sample
241203-trfyyasqbw
-
MD5
1aa9a0eab69a91dad1e4ddf16f3deb44
-
SHA1
a71e6952698784fc2ff931289ed6f87943360c13
-
SHA256
0ada51ccd560238a9b104ee8c26b8afe8f348fbbdfd12f067d2276e880298d8c
-
SHA512
a5682643ed9112435dd7e1ad430955c1ca4e3d2ccc11ac14bed669b556bd3618be4e02104fed2b4f2666d01b63029ad44b4c7534a8d7980e4bbb2a2765cb0415
-
SSDEEP
393216:8JzWUq3UKKeizYH2jBkzv7qZ/CMKGvZ/0ZtCHN:85W1nezCTzDAC1GxvHN
Static task
static1
Behavioral task
behavioral1
Sample
JQXl0lEJMWhz.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
JQXl0lEJMWhz.exe
-
Size
13.9MB
-
MD5
1aa9a0eab69a91dad1e4ddf16f3deb44
-
SHA1
a71e6952698784fc2ff931289ed6f87943360c13
-
SHA256
0ada51ccd560238a9b104ee8c26b8afe8f348fbbdfd12f067d2276e880298d8c
-
SHA512
a5682643ed9112435dd7e1ad430955c1ca4e3d2ccc11ac14bed669b556bd3618be4e02104fed2b4f2666d01b63029ad44b4c7534a8d7980e4bbb2a2765cb0415
-
SSDEEP
393216:8JzWUq3UKKeizYH2jBkzv7qZ/CMKGvZ/0ZtCHN:85W1nezCTzDAC1GxvHN
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-