General
- Target Unkclub.exe
- Size 11.7MB
- Sample260626-vx9c4sdx2n
- SHA256 116a04488767312d1147a4c0f3db8bbc3bd742a40e5c296f3a90eaa0f215a1ac
- MD5 9ccb06ebeb4f24844dd1b3576a11f246
- SHA1 e52c2c2e6a389e25997d2737ce6eac481b2f8cb5
- SHA512 4ae580b372324f2fe9b286fd169286946f961bf63f6f9e6f6fb5b0243455dc56a1a8a26ca282f94a7b4c02f40180615ce2e60974c3d7dac58dbf38d65cd8b82d
- SSDEEP 196608:JW5J0Kmssg4SQ9AYdyIsK7taW4x0VqT13HDfBkwQcHTgNpFQCxbHtX840DY3CyWZ:JW70KigNO7dZsK0HWA3DZKrD5M4sRyXc
- TLSH T107C63376C282FDE0F16683722A94559766835F1F0F0127F6A52FBE53428D2AD8B31CD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Unkclub.exe
Resource
win10ltsc2021-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Unkclub.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral3
Sample
Unkclub.exe
Resource
win11-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral4
Sample
Unkclub.exe
Resource
win11ltsc2024-20260617-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Unkclub.exe
- Size 11.7MB
- SHA256 116a04488767312d1147a4c0f3db8bbc3bd742a40e5c296f3a90eaa0f215a1ac
- MD5 9ccb06ebeb4f24844dd1b3576a11f246
- SHA1 e52c2c2e6a389e25997d2737ce6eac481b2f8cb5
- SHA512 4ae580b372324f2fe9b286fd169286946f961bf63f6f9e6f6fb5b0243455dc56a1a8a26ca282f94a7b4c02f40180615ce2e60974c3d7dac58dbf38d65cd8b82d
- SSDEEP 196608:JW5J0Kmssg4SQ9AYdyIsK7taW4x0VqT13HDfBkwQcHTgNpFQCxbHtX840DY3CyWZ:JW70KigNO7dZsK0HWA3DZKrD5M4sRyXc
- TLSH T107C63376C282FDE0F16683722A94559766835F1F0F0127F6A52FBE53428D2AD8B31CD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger