General
- Target antivm_test.exe
- Size 144KB
- Sample260718-xewemsat4m
- SHA256 03af32fecefd4d57086f68e0b55b8ef76ee6f9c5908ee603d1576a07bf3cbe8d
- MD5 d9416bc6bffa954614a5c369ba952b52
- SHA1 ad479f711f1ee18601914af0a5a8320bc4bcac06
- SHA512 15524812a9ff79c2bed69ace05d5aaa05b414dc2306db8d7cae00f4de06f98999d04e232338b9fb026f594ae0549fea6a2192a655bec24733ca071912b1c093b
- SSDEEP 3072:Cibz2XQMrPSPkoU0NGhS/068iOtP+dGpigh:LGXQMrzJOl/068iON4
- TLSH T1C1E34B17B3E530F9E1B7823989610616EB7378314B609BEF07A453766F236D09D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
antivm_test.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
antivm_test.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target antivm_test.exe
- Size 144KB
- SHA256 03af32fecefd4d57086f68e0b55b8ef76ee6f9c5908ee603d1576a07bf3cbe8d
- MD5 d9416bc6bffa954614a5c369ba952b52
- SHA1 ad479f711f1ee18601914af0a5a8320bc4bcac06
- SHA512 15524812a9ff79c2bed69ace05d5aaa05b414dc2306db8d7cae00f4de06f98999d04e232338b9fb026f594ae0549fea6a2192a655bec24733ca071912b1c093b
- SSDEEP 3072:Cibz2XQMrPSPkoU0NGhS/068iOtP+dGpigh:LGXQMrzJOl/068iON4
- TLSH T1C1E34B17B3E530F9E1B7823989610616EB7378314B609BEF07A453766F236D09D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key