General
- Target final.exe
- Size 4.0MB
- Sample260720-15passfx6k
- SHA256 43130766627d42c77b187aea1cb82a0e05e05f75e0c16f5d476224887f181222
- MD5 e51e48759841b033a9bdf8a8eabf418f
- SHA1 88607f58188aad38ffdddfbed8995ce66d37b0ac
- SHA512 14a47d769e6bc275b62f52c0cc003df12c1de33cc2e2210e018af3245b9d6eec93b6e6bf8f353123597f2038fe49927458607e4748d90319f53d487066dffd72
- SSDEEP 98304:eyavSXmlOfumAYx4NwVVIdhvf/UBHvuZ2UVJUVHx+heUmOeSh5Rcdw:eyDCUumAYaNi0hv0BHv8nJUuBmO5e
- TLSH T1E51633615D98A9E9E17C51F183750F0AF33FB3DD027E2257A42A3F7F692601C224EA19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
final.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
final.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target final.exe
- Size 4.0MB
- SHA256 43130766627d42c77b187aea1cb82a0e05e05f75e0c16f5d476224887f181222
- MD5 e51e48759841b033a9bdf8a8eabf418f
- SHA1 88607f58188aad38ffdddfbed8995ce66d37b0ac
- SHA512 14a47d769e6bc275b62f52c0cc003df12c1de33cc2e2210e018af3245b9d6eec93b6e6bf8f353123597f2038fe49927458607e4748d90319f53d487066dffd72
- SSDEEP 98304:eyavSXmlOfumAYx4NwVVIdhvf/UBHvuZ2UVJUVHx+heUmOeSh5Rcdw:eyDCUumAYaNi0hv0BHv8nJUuBmO5e
- TLSH T1E51633615D98A9E9E17C51F183750F0AF33FB3DD027E2257A42A3F7F692601C224EA19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger