General
- Target Fizzo Cracked.zip
- Size 8.2MB
- Sample260802-a3jz7abb28
- SHA256 91ac4e8c0603c69ab2336747e13932f5116358844dbbbc709d99cba932464b86
- MD5 24452f4d38c3907e71dbe082a73cd35d
- SHA1 a25d61d56c208664f8fd36243c333f830aff181b
- SHA512 46ee00bcd813dedb0f17a38f3a801b2a6217e5bb61815bf1794b5abec13eaea0437cc8f3de3f344028cd43f9ebb0e8ee8845cd50366dd481ac6341a0cd8c7b11
- SSDEEP 196608:cvs2FcmQzIZMcBig7k/k5PdsFiOXXBOCC8FfFAR3:12uZUisigvdsAODCcKJ
- TLSH T18896336701A440DFEC8F9D2DBA1B6C9EBB628105CBFB7A8851B42EF84513C959143FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
Fizzo Cracked.zip
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Fizzo Cracked.zip
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Fizzo Cracked.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
Fizzo Cracked.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Behavioral task
behavioral5
Sample
SharpMonoInjector.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
SharpMonoInjector.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target Fizzo Cracked.zip
- Size 8.2MB
- SHA256 91ac4e8c0603c69ab2336747e13932f5116358844dbbbc709d99cba932464b86
- MD5 24452f4d38c3907e71dbe082a73cd35d
- SHA1 a25d61d56c208664f8fd36243c333f830aff181b
- SHA512 46ee00bcd813dedb0f17a38f3a801b2a6217e5bb61815bf1794b5abec13eaea0437cc8f3de3f344028cd43f9ebb0e8ee8845cd50366dd481ac6341a0cd8c7b11
- SSDEEP 196608:cvs2FcmQzIZMcBig7k/k5PdsFiOXXBOCC8FfFAR3:12uZUisigvdsAODCcKJ
- TLSH T18896336701A440DFEC8F9D2DBA1B6C9EBB628105CBFB7A8851B42EF84513C959143FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target Fizzo Cracked.exe
- Size 8.3MB
- SHA256 ee8c85706a2cdff4f03a7a604f0e5cec3e003802ff2f296b763b51457c836388
- MD5 47c21eac6cc87443ef86a7b3b6eef29a
- SHA1 cce46d8aa8ba2130b024e434df856f270757a5d6
- SHA512 65ef1dbad33f4f71b466ddaf99f7128bd0bc23882e04b8857ac7de8b01ba474c3ab789d5fcbadc5d88eceefaf77d71fe24bddbd9cf78f28b1d43872642aad9ee
- SSDEEP 196608:5IOSszeNPnD8edkbgRyDtNLGQHAgrALledECcpJK6:5qs6dnMPtNLdgIOedEQ6
- TLSH T1A89633A90111FEB6D84D89F262246C90742900E65CBF8F0929D976FF4AD34EBE316CF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target SharpMonoInjector.dll
- Size 22KB
- SHA256 29217632db48464afb84f163f6d389af525edb7e951384ff5ea91d91c932ee96
- MD5 d5f8ef2cdc4323ddd7845c9b90e4c6fd
- SHA1 fb40ced0fe0ba5bc83b0edc381c1c475ff773ff8
- SHA512 cd6efd9093b1b4ab867f0098e281655bd28af721f3a45efcfd9771174dc47dbc05e63e5d80e10296881facc7e100b834501c3bba4088e8bde3db6f88d9e27ad2
- SSDEEP 384:bNQjEDfKh78RjUV/wWWbSYNCi1ssza2Q6OgxMDfd/Wjp9zDqPD6eSFjgii/:JpqlwFmYNTxzepBW1nQ
- TLSH T146A2E604B3FC5A63F5FF4EB4A473224047B2F5A16422D75D0CD852E9AA237944B22BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10