Overview

overview

9

Static

static

3

10f718f5f7...75.zip

windows10-2004-x64

9

10f718f5f7...75.zip

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    25275575832.zip
  • Size 6.7MB
  • Sample260623-hljbbsay8j
  • SHA256 c86bbe1046e20c266a2c1048a06146bed885e6aaa6df73ae0953409d7cb3afda
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
defense_evasionpersistence

Malware Config

Targets

    • Target
      10f718f5f7a2c8b8f4c3ba691c72de6481b8ffd3468d67a6233a8592c911c075
    • Size 6.7MB
    • SHA256 10f718f5f7a2c8b8f4c3ba691c72de6481b8ffd3468d67a6233a8592c911c075
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    defense_evasionpersistence

    • Looks for VirtualBox Guest Additions in registry

      defense_evasion

    • Looks for VMWare Tools registry key

      defense_evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks