Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/06/2026, 03:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
meme.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
meme.exe
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target meme.exe
- Size 344KB
- Sample260601-ecd4gaes4m
- SHA256 de619d3f262f6879b6ff28bc3f6d26ae745d456d7dccdb443ee5a14259d30374
- MD5 abbe9182a4f04f0ac77989da86d2d57f
- SHA1 a320993e0549f87fd18230e38d1c6771069cad8e
- SHA512 c3c214d787d8f4a4917eb6b57735783e18ac7e92604a4a88167e002fb0c409625db584c81217ac6b23417268d30d8c92f08ac5463858cd7bfd4d1ba19df9d720
- SSDEEP 6144:XpnjRTjRTiVsKJblYA09qGeKuf7eVCZXJndeqiS:pjRTjcVrJf094KGC0ZXTE
- TLSH T1C9747D56F7A514F9E1678178C9664906EB727C4A0370AFCF23904AA72F236E09F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ meme.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2404 meme.exe 2404 meme.exe 2404 meme.exe 2404 meme.exe