General
- Target Immortal Emulator.exe
- Size 1.3MB
- Sample260808-1tmb3avgkf
- SHA256 2fcb4c7a4375ce39d3fead5dfec7452d86015de8acf97b8d21c1f1a7af4f6745
- MD5 70fb2daf073b99ac687025cc7dc440a5
- SHA1 aee41a1d6c3d44d62afd9a19872a6b6f39b54329
- SHA512 cd73f2fdfb9e9a9029add5e2efbb41f35aca97dceab5848fdd57cd72c292759943fc487c463696b2659d5662984736d42d3cba6442a874d2755cd310366a8c4e
- SSDEEP 12288:0hyzFlO0JTU7aQWppsq6u3ToAzKFg92+61g0isVY73OglENUR75Yi1nBKB:/lxjQpu3TowKN+61hFeigii1n
- TLSH T16D55AE11B2A941FAD067D1B8E996661BE632380507309EDF13C16E592F67BF09E3FB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Immortal Emulator.exe
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Immortal Emulator.exe
- Size 1.3MB
- SHA256 2fcb4c7a4375ce39d3fead5dfec7452d86015de8acf97b8d21c1f1a7af4f6745
- MD5 70fb2daf073b99ac687025cc7dc440a5
- SHA1 aee41a1d6c3d44d62afd9a19872a6b6f39b54329
- SHA512 cd73f2fdfb9e9a9029add5e2efbb41f35aca97dceab5848fdd57cd72c292759943fc487c463696b2659d5662984736d42d3cba6442a874d2755cd310366a8c4e
- SSDEEP 12288:0hyzFlO0JTU7aQWppsq6u3ToAzKFg92+61g0isVY73OglENUR75Yi1nBKB:/lxjQpu3TowKN+61hFeigii1n
- TLSH T16D55AE11B2A941FAD067D1B8E996661BE632380507309EDF13C16E592F67BF09E3FB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger