General
- Target VenomTH (1).exe
- Size 24.2MB
- Sample260702-rdcm9acy3q
- SHA256 bf7996218b9b4d0d8b82c75dc70f1c3d9ccec0e1c3652d574f0ce9d41ba81e22
- MD5 4b4d6d5afcffe562fd55dd83ed528eed
- SHA1 da76d253cc344a1ab0122167bce2913bc3e261a7
- SHA512 4c3364987c11f46bcb91be683952d6d83ef1971c54df1f3a30da64238e8786b36a246bef45e15c3b46c311e563ddf9e215a9dc78a5b27c5aaba9fbbe95df293c
- SSDEEP 786432:DUhDkbD867Kyg4pndM2GuwRfbs+Pl/Fn:DUGbPpf/MQoo+Pl/d
- TLSH T1A34733DABED461D0E4D38D71A38E62DDA0C3B07B6A9A5C2C36D519015A30D87DB0ED3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VenomTH (1).exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
VenomTH (1).exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target VenomTH (1).exe
- Size 24.2MB
- SHA256 bf7996218b9b4d0d8b82c75dc70f1c3d9ccec0e1c3652d574f0ce9d41ba81e22
- MD5 4b4d6d5afcffe562fd55dd83ed528eed
- SHA1 da76d253cc344a1ab0122167bce2913bc3e261a7
- SHA512 4c3364987c11f46bcb91be683952d6d83ef1971c54df1f3a30da64238e8786b36a246bef45e15c3b46c311e563ddf9e215a9dc78a5b27c5aaba9fbbe95df293c
- SSDEEP 786432:DUhDkbD867Kyg4pndM2GuwRfbs+Pl/Fn:DUGbPpf/MQoo+Pl/d
- TLSH T1A34733DABED461D0E4D38D71A38E62DDA0C3B07B6A9A5C2C36D519015A30D87DB0ED3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger