General
- Target folk.exe
- Size 3.7MB
- Sample260729-tx1wasbd39
- SHA256 290c2ff4ab788d6f8cdb1893e0fd61b83306c6418fe49d6c7526ccfd0aca0f19
- MD5 5e853d17a2619df9e6bdbbd2d0d42fa6
- SHA1 a875d3cbaa4dedad1a83affbcbbe5eef348095cc
- SHA512 e7a4fd54b773af73e36b8cb3763cc141055bb082a6cb15e20445aaeedde5ff5c97eb1e4e5e46e05f0b400fc918d5c1569b287f8dfa1c94db01350da8d6c8f598
- SSDEEP 49152:30nG7XaoRrAQRiLkM/GZNk2IvogPs8xjnJDdT1ICUt6ZuWQ+Px0kYYm/NXFQxW:ZrvRJM+ZNJqs8NJDdByKA+P5VmdW
- TLSH T1F606021E588AB0B0EB18CF72656B05BAE426D7BC844A48472358F5CC137BB7D45D8F8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
folk.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target folk.exe
- Size 3.7MB
- SHA256 290c2ff4ab788d6f8cdb1893e0fd61b83306c6418fe49d6c7526ccfd0aca0f19
- MD5 5e853d17a2619df9e6bdbbd2d0d42fa6
- SHA1 a875d3cbaa4dedad1a83affbcbbe5eef348095cc
- SHA512 e7a4fd54b773af73e36b8cb3763cc141055bb082a6cb15e20445aaeedde5ff5c97eb1e4e5e46e05f0b400fc918d5c1569b287f8dfa1c94db01350da8d6c8f598
- SSDEEP 49152:30nG7XaoRrAQRiLkM/GZNk2IvogPs8xjnJDdT1ICUt6ZuWQ+Px0kYYm/NXFQxW:ZrvRJM+ZNJqs8NJDdByKA+P5VmdW
- TLSH T1F606021E588AB0B0EB18CF72656B05BAE426D7BC844A48472358F5CC137BB7D45D8F8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger