General
- Target echo-free.exe
- Size 50.3MB
- Sample260809-wkcdaabl2x
- SHA256 526a03655fa47bcc97dcf25033d3267b53ea5e8e5e11926e18eb9b0ec2e54f82
- MD5 13afa9728ccce34cea1474937067fd3a
- SHA1 08afffb3bb2ea20f8f3b05030b405a9950c0258c
- SHA512 3d1328f5436b4f09aabd747a77178dc41b0992aa8dccadefa6d7ada87e709a28f1e9d7121ab618d9e9808f42e6f80475c7602b6d5485732535e3f1a87e93fba0
- SSDEEP 786432:+P3D54f3ntrN/Ni4XuRJTJhgq01qZOrNpP7c:E3UFi4Xy7OqEN4
- TLSH T186C7AF079D5B10F6C0BD82344559A12AE2B2BC0A9BD877D73E8AFB2C1F376D0163A751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
echo-free.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
echo-free.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target echo-free.exe
- Size 50.3MB
- SHA256 526a03655fa47bcc97dcf25033d3267b53ea5e8e5e11926e18eb9b0ec2e54f82
- MD5 13afa9728ccce34cea1474937067fd3a
- SHA1 08afffb3bb2ea20f8f3b05030b405a9950c0258c
- SHA512 3d1328f5436b4f09aabd747a77178dc41b0992aa8dccadefa6d7ada87e709a28f1e9d7121ab618d9e9808f42e6f80475c7602b6d5485732535e3f1a87e93fba0
- SSDEEP 786432:+P3D54f3ntrN/Ni4XuRJTJhgq01qZOrNpP7c:E3UFi4Xy7OqEN4
- TLSH T186C7AF079D5B10F6C0BD82344559A12AE2B2BC0A9BD877D73E8AFB2C1F376D0163A751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger