General
- Target sys.dll
- Size 3.4MB
- Sample260423-e9hsxsg12l
- SHA256 de7fe8842c46bc5c2f723dee3d4b07043d531d067c06caa3263000bcc41aecdd
- MD5 bb0c121384f2b95015428b9108398183
- SHA1 c9f8beda9d1b83eed4d7a47164763c68599a5f09
- SHA512 41e142f70a2490b027034d6dbf0b08fba7dc7b91b87c32c455d6d6e512e20e00085b8602e04a635cf5f1aa5b96914780a32f439acb7432460b128488e363fc0d
- SSDEEP 49152:PfzUi9Dt9HyaUp0VimykkoZPwdP/PaERrFsp:PfT7oYEoWdCER
- TLSH T1CBF5D6E620C6A6DDC416C5BB8713FD7F888F7936862AD8F3A064F2225D25CC43675E09
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
sys.dll
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
sys.dll
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target sys.dll
- Size 3.4MB
- SHA256 de7fe8842c46bc5c2f723dee3d4b07043d531d067c06caa3263000bcc41aecdd
- MD5 bb0c121384f2b95015428b9108398183
- SHA1 c9f8beda9d1b83eed4d7a47164763c68599a5f09
- SHA512 41e142f70a2490b027034d6dbf0b08fba7dc7b91b87c32c455d6d6e512e20e00085b8602e04a635cf5f1aa5b96914780a32f439acb7432460b128488e363fc0d
- SSDEEP 49152:PfzUi9Dt9HyaUp0VimykkoZPwdP/PaERrFsp:PfT7oYEoWdCER
- TLSH T1CBF5D6E620C6A6DDC416C5BB8713FD7F888F7936862AD8F3A064F2225D25CC43675E09
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare Tools registry key
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.