General
- Target poker.exe
- Size 20.0MB
- Sample260707-vwtk9sbs4k
- SHA256 ee7c2fdd1141c672fe0fdddd90e16ac2e44ad11dc539a492237cf16fbd764a5d
- MD5 a3becbe53809e594b7fabb86aac7803b
- SHA1 db29214c0d1f54dcdf191dbebda4190af756c20f
- SHA512 5c4a6ae7931374c497574be71a4b3e88a366465a3527d68a4db7a24a9158af6f16a2242562658cade3ed34619805fad025dd5c24505a96158ce2037a8186b31e
- SSDEEP 393216:i1cPCoNDbmCz541+cedM94DA7npgNhKrsN0FoZtlSvHUFGv2DMsXJ2+S/+vdbXTv:i2a3CV4Ize9KA2/NHtlSYDvi+VjuJ2II
- TLSH T14127336670DC5DF6C622E73F3DB4C88989FA45C14170B0D4FB87E4202DB0A9D99A2AF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
poker.exe
Resource
win10v2004-20260513-en
17 signatures
600 seconds
Behavioral task
behavioral2
Sample
poker.exe
Resource
win11ltsc2024-20260706-en
4 signatures
600 seconds
Malware Config
Targets
-
- Target poker.exe
- Size 20.0MB
- SHA256 ee7c2fdd1141c672fe0fdddd90e16ac2e44ad11dc539a492237cf16fbd764a5d
- MD5 a3becbe53809e594b7fabb86aac7803b
- SHA1 db29214c0d1f54dcdf191dbebda4190af756c20f
- SHA512 5c4a6ae7931374c497574be71a4b3e88a366465a3527d68a4db7a24a9158af6f16a2242562658cade3ed34619805fad025dd5c24505a96158ce2037a8186b31e
- SSDEEP 393216:i1cPCoNDbmCz541+cedM94DA7npgNhKrsN0FoZtlSvHUFGv2DMsXJ2+S/+vdbXTv:i2a3CV4Ize9KA2/NHtlSYDvi+VjuJ2II
- TLSH T14127336670DC5DF6C622E73F3DB4C88989FA45C14170B0D4FB87E4202DB0A9D99A2AF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.