General
- Target VoidBoot.exe
- Size 158KB
- Sample260802-vg29vsda23
- SHA256 ddd4e90b1d9013795659f3128757b23bc375339aec79e7015824db92134f6c69
- MD5 76b62c230d20d40f1464a86f717b7e13
- SHA1 d5f34f07540cd118b06ff0a06e256f46a37ccaed
- SHA512 58a86be37a4761386f54a8549cb68d703b85afef994d411fd3cba019fa015983d147441d30b75f7cf211a8f6ac7c73e373dcebd7d30a909e717329cdbe7eadf4
- SSDEEP 3072:uVDxk88wN1xL+x7dL1Z9QnlP97E3swm9uzaAT5d0:yRax7F1nQnhcUJK
- TLSH T1BDF33C13A6A851BEE1B3D678C9924941FB7278594B71A7CF03504EBA0F77BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VoidBoot.exe
Resource
win11ltsc2024-20260709-en
20 signatures
900 seconds
Malware Config
Targets
-
- Target VoidBoot.exe
- Size 158KB
- SHA256 ddd4e90b1d9013795659f3128757b23bc375339aec79e7015824db92134f6c69
- MD5 76b62c230d20d40f1464a86f717b7e13
- SHA1 d5f34f07540cd118b06ff0a06e256f46a37ccaed
- SHA512 58a86be37a4761386f54a8549cb68d703b85afef994d411fd3cba019fa015983d147441d30b75f7cf211a8f6ac7c73e373dcebd7d30a909e717329cdbe7eadf4
- SSDEEP 3072:uVDxk88wN1xL+x7dL1Z9QnlP97E3swm9uzaAT5d0:yRax7F1nQnhcUJK
- TLSH T1BDF33C13A6A851BEE1B3D678C9924941FB7278594B71A7CF03504EBA0F77BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger