Resubmissions

02/07/2026, 14:04

260702-rdcm9acy3q9

02/07/2026, 14:00

260702-ra8arafw5x9

General

  • Target
    VenomTH (1).exe
  • Size 24.2MB
  • Sample260702-rdcm9acy3q
  • SHA256 bf7996218b9b4d0d8b82c75dc70f1c3d9ccec0e1c3652d574f0ce9d41ba81e22
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      VenomTH (1).exe
    • Size 24.2MB
    • SHA256 bf7996218b9b4d0d8b82c75dc70f1c3d9ccec0e1c3652d574f0ce9d41ba81e22
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Enumerates VirtualBox registry keys

    • Looks for VirtualBox Guest Additions in registry

    • Looks for VMWare Tools registry key

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks