General
- Target windows_update.exe
- Size 32.3MB
- Sample260730-dbesya1xa1
- SHA256 08001ce5bd12fb739a34d4e7d11a461bdd651a22c9ca946a7fc38490bd3a3170
- MD5 308af477fcd6c0607ba52e9b2af895bf
- SHA1 d1db28c2b1d2a9d07cee829ea4df446a8e210e0c
- SHA512 ac67b6212f91036ec51bcf1affd47d04ffd3f790240d46ea0580e157247b948d7e06665e1c2e5f1385ebe026d2c3b474d9842bc0384244c69be527859a00a642
- SSDEEP 786432:QULEPf2FjJPqPx3HxUxZvqUH9/SLBNKyr4TFoRphfo+rjAvFg:YPKjJQ3HxUxkWm4BFoPhBr
- TLSH T132773399933154B9E0F7C83E3E7ED49983D3B0801FD292B735D148109A3B9E12DF6A96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
windows_update.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
windows_update.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target windows_update.exe
- Size 32.3MB
- SHA256 08001ce5bd12fb739a34d4e7d11a461bdd651a22c9ca946a7fc38490bd3a3170
- MD5 308af477fcd6c0607ba52e9b2af895bf
- SHA1 d1db28c2b1d2a9d07cee829ea4df446a8e210e0c
- SHA512 ac67b6212f91036ec51bcf1affd47d04ffd3f790240d46ea0580e157247b948d7e06665e1c2e5f1385ebe026d2c3b474d9842bc0384244c69be527859a00a642
- SSDEEP 786432:QULEPf2FjJPqPx3HxUxZvqUH9/SLBNKyr4TFoRphfo+rjAvFg:YPKjJQ3HxUxkWm4BFoPhBr
- TLSH T132773399933154B9E0F7C83E3E7ED49983D3B0801FD292B735D148109A3B9E12DF6A96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VMWare services registry key.
-
Loads dropped DLL