General
- Target 9c4fd10864c9599ee8029d5f0541d8cd996b5b1832ed1b4432873285c0d05a8f
- Size 793KB
- Sample260719-3qetxsbs8v
- SHA256 9c4fd10864c9599ee8029d5f0541d8cd996b5b1832ed1b4432873285c0d05a8f
- MD5 db52f9b49d119e4d94e754c77494d617
- SHA1 6f509b493a74ad4c7c6c0c5f8bae7adc9a88e539
- SHA512 b560709be0e61da2f4553312daf3863180fae445ef528752dbac8037092e0285c14d9e65ec9399064e773579ae1825d301841cb9e2357db4b5d83ece78580580
- SSDEEP 12288:T4mjxA4qCmwhFFoBCJp6/X72/mCCjZgMX84hSlduBZIw6Ev:T4m1A9bSoBCJu7XZF844hzEv
- TLSH T12A05E01AB61D58FDE01AC071825506779A31B4CA0B506AFF81D42A393FAAFF11F3A71D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9c4fd10864c9599ee8029d5f0541d8cd996b5b1832ed1b4432873285c0d05a8f.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
9c4fd10864c9599ee8029d5f0541d8cd996b5b1832ed1b4432873285c0d05a8f.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 9c4fd10864c9599ee8029d5f0541d8cd996b5b1832ed1b4432873285c0d05a8f
- Size 793KB
- SHA256 9c4fd10864c9599ee8029d5f0541d8cd996b5b1832ed1b4432873285c0d05a8f
- MD5 db52f9b49d119e4d94e754c77494d617
- SHA1 6f509b493a74ad4c7c6c0c5f8bae7adc9a88e539
- SHA512 b560709be0e61da2f4553312daf3863180fae445ef528752dbac8037092e0285c14d9e65ec9399064e773579ae1825d301841cb9e2357db4b5d83ece78580580
- SSDEEP 12288:T4mjxA4qCmwhFFoBCJp6/X72/mCCjZgMX84hSlduBZIw6Ev:T4m1A9bSoBCJu7XZF844hzEv
- TLSH T12A05E01AB61D58FDE01AC071825506779A31B4CA0B506AFF81D42A393FAAFF11F3A71D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox DLL files
-
Looks for VirtualBox drivers on disk
-
Looks for VirtualBox executables on disk
-
Looks for VMWare drivers on disk
-
Suspicious use of NtSetInformationThreadHideFromDebugger