General
- Target vexor-updater.exe
- Size 2.4MB
- Sample260811-2gpr4azwf1
- SHA256 72a0ddcb9f995db23ea49654ab11833e4bce5488297947d955d9f24b92f48038
- MD5 6391a67b8962168ef8a566d77649ecab
- SHA1 794529866444f933e782faac66311416e29fc16f
- SHA512 11b9541af815b4c70f4da0c4621c23a3ffba2eb61d9b738e196a5011f0ea29c1b2200aff891448575c06c5ce334def193e1a159171ef74e20ca1854f499bbf98
- SSDEEP 49152:9i847mkM6T6ZFpRqPBefF9rpzFsnE7ynkr4iHmx2mk9GDBWASp:nFpCe99bsnZc14Dm
- TLSH T18DC5C04552A916ECC176E178C70AA617FA3A34840B309AFB1BE15A061F63BF3577F720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vexor-updater.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
vexor-updater.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target vexor-updater.exe
- Size 2.4MB
- SHA256 72a0ddcb9f995db23ea49654ab11833e4bce5488297947d955d9f24b92f48038
- MD5 6391a67b8962168ef8a566d77649ecab
- SHA1 794529866444f933e782faac66311416e29fc16f
- SHA512 11b9541af815b4c70f4da0c4621c23a3ffba2eb61d9b738e196a5011f0ea29c1b2200aff891448575c06c5ce334def193e1a159171ef74e20ca1854f499bbf98
- SSDEEP 49152:9i847mkM6T6ZFpRqPBefF9rpzFsnE7ynkr4iHmx2mk9GDBWASp:nFpCe99bsnZc14Dm
- TLSH T18DC5C04552A916ECC176E178C70AA617FA3A34840B309AFB1BE15A061F63BF3577F720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Suspicious use of NtSetInformationThreadHideFromDebugger