General
- Target fd55f42200ffdf235c86b4364309426823e28b1c2e0723ddf9b35eac8062c7d7
- Size 410KB
- Sample260706-kghkcacx6v
- SHA256 fd55f42200ffdf235c86b4364309426823e28b1c2e0723ddf9b35eac8062c7d7
- MD5 cafdf7807836a7f285bdc85f47efd657
- SHA1 d2922617c25c375580e427ea8da98651fb9ec38d
- SHA512 77bfabff025040816324a9beec7a6374d3d8f53fd4aa621e4a699251fd0813c7003e26cd849d28843417ee17d9c2373a712b3f2c235b08ef93a8754a5098c511
- SSDEEP 6144:PUDuubOlSndLNGrVOPD6E76O8UWZfqfnusdCZYCjU:ruuUG4PGEGO8QPHMJjU
- TLSH T1B5947D22F7955CF9D05BC07483528572AA72B8CA0B21E9EF03A842252F66BF15F3DF15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fd55f42200ffdf235c86b4364309426823e28b1c2e0723ddf9b35eac8062c7d7.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
fd55f42200ffdf235c86b4364309426823e28b1c2e0723ddf9b35eac8062c7d7.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target fd55f42200ffdf235c86b4364309426823e28b1c2e0723ddf9b35eac8062c7d7
- Size 410KB
- SHA256 fd55f42200ffdf235c86b4364309426823e28b1c2e0723ddf9b35eac8062c7d7
- MD5 cafdf7807836a7f285bdc85f47efd657
- SHA1 d2922617c25c375580e427ea8da98651fb9ec38d
- SHA512 77bfabff025040816324a9beec7a6374d3d8f53fd4aa621e4a699251fd0813c7003e26cd849d28843417ee17d9c2373a712b3f2c235b08ef93a8754a5098c511
- SSDEEP 6144:PUDuubOlSndLNGrVOPD6E76O8UWZfqfnusdCZYCjU:ruuUG4PGEGO8QPHMJjU
- TLSH T1B5947D22F7955CF9D05BC07483528572AA72B8CA0B21E9EF03A842252F66BF15F3DF15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox DLL files
-
Looks for VirtualBox drivers on disk
-
Looks for VirtualBox executables on disk
-
Looks for VMWare drivers on disk
-
Suspicious use of NtSetInformationThreadHideFromDebugger