General
- Target liHPF2KWjt8xGPW2c.exe
- Size 42.9MB
- Sample260728-wnhdps1hpg
- SHA256 d6cb08411deb408a4b24c554835093d5af921d5634deeff971bce158f381d7ce
- MD5 3075fa2bac2f75b5b8f49e51ce57095e
- SHA1 e571efc25fde6f9cae5f55005b3cd6668972ba56
- SHA512 0d09a5a7e92f231de0bfbe41571988534be9474918b31522c7dcc69110e87a8c300b2f204943c186f003a333c6e300ffecdaaeb09736faac7fffc9f3399dd2ef
- SSDEEP 786432:Rqtekqmc1CaQFDtdtB8NZc/eJL2T1WotnwjAG5FaSOtprMCY:RNNiDf8k7nRwrsxp0
- TLSH T14FA73362C3A274EBE425AEF01C285C50CDB36C67BF1112E6F61742365C27EC64F26E99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
liHPF2KWjt8xGPW2c.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target liHPF2KWjt8xGPW2c.exe
- Size 42.9MB
- SHA256 d6cb08411deb408a4b24c554835093d5af921d5634deeff971bce158f381d7ce
- MD5 3075fa2bac2f75b5b8f49e51ce57095e
- SHA1 e571efc25fde6f9cae5f55005b3cd6668972ba56
- SHA512 0d09a5a7e92f231de0bfbe41571988534be9474918b31522c7dcc69110e87a8c300b2f204943c186f003a333c6e300ffecdaaeb09736faac7fffc9f3399dd2ef
- SSDEEP 786432:Rqtekqmc1CaQFDtdtB8NZc/eJL2T1WotnwjAG5FaSOtprMCY:RNNiDf8k7nRwrsxp0
- TLSH T14FA73362C3A274EBE425AEF01C285C50CDB36C67BF1112E6F61742365C27EC64F26E99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger