General
- Target HoAx (1).zip
- Size 243.0MB
- Sample260623-vg5pzset6m
- SHA256 97b2c77f700aedeab47f308930716f283eae46067737ae2f80b788c806d0d060
- MD5 0b642daf0f40d96bdb250b643340aa21
- SHA1 6bb0206ce2ac909823b063d3f09fd68f3c9435bf
- SHA512 cd35f94dd26832f72d7c39261b04b9ee71bb6682fd0d064e63220348830ef6011a44d58d8667287013ba5872682db03f8daaa4e6f5b8df00cdc5b1f5ca7d8eb3
- SSDEEP 6291456:QnhdO3jOfbMAyZlOfyO84hrPTxfza438y5Z:GYOawh9a4N5Z
- TLSH T1AFC833EE2EB954250ABAAA277B7E9C0CA1CD3447734C879EDE6D4B0BD4530CD5708293
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HoAx/HoAx.exe
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
HoAx/VMProtectSDK64.dll
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target HoAx/HoAx.exe
- Size 246.7MB
- SHA256 dd91e4e734ae4a80876f9292502eacaeb9f8b7f529223c6aeea7e14fd6e3e78f
- MD5 a5c02cb5d72b3ab2a3d3a10ad977cab3
- SHA1 5ee26a40d48c0113f3a407329f6dc65125aa7a24
- SHA512 85cdc0d89aed02e22cf2cacc800546a7f48931c935910d260c9d63993cee70807d678acd384597d1afbdb849006b9c69ec0ac2b5f63b55a69da7a82b56c9a0c7
- SSDEEP 6291456:kRDYb7Y3Hkk61DKZWkMCdHTL//QoNugB:kCKo+dfQoJB
- TLSH T154C833D529D482BCC4A2C535E28919FEF0C5384A4DBD892FBFCA0C027671C85F9E6976
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target HoAx/VMProtectSDK64.dll
- Size 115KB
- SHA256 ec3235136a4daee2a6f72c0f2994a8365ca8427c8068d068130b74c9fa64cd02
- MD5 c0ce8c981bda19d2be17aca0774d9df1
- SHA1 895052a42efa50043f473f072578bee69be8d2f8
- SHA512 1578948dba2492263c0b174816451218c70df89e6b4440981db9513c664d97f6253fc1c0dab4164c620b9cb7794f4789677a0c38e0a5ac9636aee1dbc3d16062
- SSDEEP 3072:0RcqYHq7Aiytzg2ScpvgJcLYsqYX6UDdyBo:K0Hq7AiyegZgJoZXBa
- TLSH T171C35B47B3E540BBD1B6C679CD234A56D3B678150B249BAF07A402162F233D18E3AF72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10