130b2991b27599d5a2d6ea39a7bd85356acac5f2ad28a0b2fec6078190e11583

General

Target
Downloads.zip
Size 30.4MB
Sample260724-2wdy5svemc
SHA256 130b2991b27599d5a2d6ea39a7bd85356acac5f2ad28a0b2fec6078190e11583
MD5 eeb43bd41a593b7dc189c33263e27b4e
SHA1 b2c9f5eb4c3f8259dffb368d787056084b5795e5
SHA512 414bad8651dc01fd3b5b80de62514afc5ddcc38aa4a0de9d5f7c29320a6850e43a1fb8054d9b470a042b8eb9c058a398f29e713c57d703b5fadb3f2fd5c8ef84
SSDEEP 786432:gKU9S5584kqMwSdUBlpOOSQoul0pkb5RnM18IeKNIYDeixxdeqLfU7V6xg:TUOLkqedUBEQoutKNhV/em8V6xg
TLSH
T1E767331088EBDA65C8EB590F5675F48DB0A5B6284C67FFC364BF0EBD3F0A25266B1044
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  echo-47A2AC-NmNhdGh6-bDO0j=-f.exe
- Size 76.2MB
- SHA256 f465c01b9c6d9e80823f6728c02c7ceecbc9724969777a41af8835a4300af8ef
- MD5 7b8d35373cc7c78d76d3ec2160f5a784
- SHA1 dffc27623de53fa1bc3766e9057e2ec98934e875
- SHA512 42f6a8977db2e071db85d5f61431b74fba10e2f735532b6f0d23c8ace689462fe9f7fac888ab3a5e3fb4c5aceee22c4dfb96d0a0c1dbd20cfb520ce5991d5549
- SSDEEP 786432:EnfqaLln6sUszIR1aqXuRJTJhgq01qZORRn3sAOHA:EfpBnfNobXy7OqEV3pOg
- TLSH
  T114088E07EA5620F9C0BEC17542199136F6B1784A47A07BDB3E89E63D2F37AD01B3A714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion spyware trojan
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  defense_evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1
- Target
  template.exe
- Size 576KB
- SHA256 8ea37d5f3651a41fcad44ac5c90712b5d6f480dc52fc1e74b6edbe0db929c614
- MD5 7af557aebe5049260903a335639a3793
- SHA1 c3a7f3bac620d5a44f27919a975c93b517ac6d47
- SHA512 45315111ae1f0850e47e4042c772cb62b29f16210058e8b297bc3124c29f2a41a9a6bb2c7a0117ac81b172ee554f3cea87f2b9a39a7f57603c14bdb378906211
- SSDEEP 6144:knGVyxf+wojcMKE/xQSgzChUotrFGXjvixNBfTVmdVfqF3pWph0lhSMXlBXBWnP+:k/3oF1heqboVf4Aph0lhSMXliPi
- TLSH
  T160C49E26B3E541F8E16BC278C9524A66EA73BC4603616ADF03E456A31F236D05F3FB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2