General
- Target vexor-updater.exe
- Size 2.4MB
- Sample260619-yr8feabs8m
- SHA256 902584a04274d0cfbb766ace6f0b52d90d4b43bd0c6bda89ca5a6547662f02b2
- MD5 468d4be3b71eea444c233ea682ea2f29
- SHA1 21559b0d04719811d35d2482c0b455b8540e581e
- SHA512 5422b79836480232ce96f2be8022e5149e1bf1382c7c86ab26812953de41f821753f042606443348a1d7ef6ce4fd8257c0ff9b6d1ecff5b1018791ede7e2d168
- SSDEEP 49152:HoaFRu674+P2Jn2fpJ+79akz2UsnE73nowWx2mk9GDBWASp:nDJU9Tsnzc14Dm
- TLSH T1F7C5CF4552A916ECC176E178D706A617FA3A34840B309AFB1BE14A162F63BF3577F320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vexor-updater.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
vexor-updater.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target vexor-updater.exe
- Size 2.4MB
- SHA256 902584a04274d0cfbb766ace6f0b52d90d4b43bd0c6bda89ca5a6547662f02b2
- MD5 468d4be3b71eea444c233ea682ea2f29
- SHA1 21559b0d04719811d35d2482c0b455b8540e581e
- SHA512 5422b79836480232ce96f2be8022e5149e1bf1382c7c86ab26812953de41f821753f042606443348a1d7ef6ce4fd8257c0ff9b6d1ecff5b1018791ede7e2d168
- SSDEEP 49152:HoaFRu674+P2Jn2fpJ+79akz2UsnE73nowWx2mk9GDBWASp:nDJU9Tsnzc14Dm
- TLSH T1F7C5CF4552A916ECC176E178D706A617FA3A34840B309AFB1BE14A162F63BF3577F320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Suspicious use of NtSetInformationThreadHideFromDebugger