General
- Target Water.exe
- Size 3.8MB
- Sample260724-rlxy6agg65
- SHA256 52e45de43a3ccda98e4ea7af5322e9887883e6855b867dbae9473c172d6df034
- MD5 099f60857f57932dda3c5fced6b1524c
- SHA1 1a5d5495f2f72448d6342fab8fc574ce83dd33c5
- SHA512 3d22ec2c5320eb84e2d9b72cbebb42e114fc0b13c648306c9309b6fd631b29a5dda85732cfbf0c89067c53aa626cb9f7ee81d819ea7831b474efb37d7ce0260f
- SSDEEP 49152:BTNvgrCXVyZ2mfezstUEZDarnMZIXiygg1DUJp4t3R/88WDQ4QhjMIsQ8kPI+6Mn:kRezsOqAggR7WDyjMIsQ8kPuv+
- TLSH T13E06C006A26521E9C56AD1788B9B9607E336304507306BE777A4F79A1FE37F04EBB301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Water.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Water.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Water.exe
- Size 3.8MB
- SHA256 52e45de43a3ccda98e4ea7af5322e9887883e6855b867dbae9473c172d6df034
- MD5 099f60857f57932dda3c5fced6b1524c
- SHA1 1a5d5495f2f72448d6342fab8fc574ce83dd33c5
- SHA512 3d22ec2c5320eb84e2d9b72cbebb42e114fc0b13c648306c9309b6fd631b29a5dda85732cfbf0c89067c53aa626cb9f7ee81d819ea7831b474efb37d7ce0260f
- SSDEEP 49152:BTNvgrCXVyZ2mfezstUEZDarnMZIXiygg1DUJp4t3R/88WDQ4QhjMIsQ8kPI+6Mn:kRezsOqAggR7WDyjMIsQ8kPuv+
- TLSH T13E06C006A26521E9C56AD1788B9B9607E336304507306BE777A4F79A1FE37F04EBB301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VMWare services registry key.