General
- Target wrah.exe
- Size 75KB
- Sample260812-se64xsdd85
- SHA256 5bb57122390398b593763652fe523ed2d4a4578a34fb6fef221358ef518679d1
- MD5 548708be99864f3d909e7d0800e3c232
- SHA1 2aa6525a1cb47ea3a295c72890a13f6186a1a3cb
- SHA512 08863ae3bb35745e9ed0348f08b63d23a10f02a05cb7502af5a8d532f2ac5705a59a6532d59ef08e63f85148a30bd9c76a2fad7236e55eec7267f6adb6574323
- SSDEEP 768:XH1ltF/XXY19SMYcZjpG1YiGhBCFmaVZrWnn+PXmDRhATTTTppXCcKBXduCvOyhj:XH/r/XkSZcZjpG15tVcnnWpyIDhjL
- TLSH T16A73081BF15360FCC25BC274CAEA1633E772786495342F6E57A0D6762E71AA07E38B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
wrah.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
wrah.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target wrah.exe
- Size 75KB
- SHA256 5bb57122390398b593763652fe523ed2d4a4578a34fb6fef221358ef518679d1
- MD5 548708be99864f3d909e7d0800e3c232
- SHA1 2aa6525a1cb47ea3a295c72890a13f6186a1a3cb
- SHA512 08863ae3bb35745e9ed0348f08b63d23a10f02a05cb7502af5a8d532f2ac5705a59a6532d59ef08e63f85148a30bd9c76a2fad7236e55eec7267f6adb6574323
- SSDEEP 768:XH1ltF/XXY19SMYcZjpG1YiGhBCFmaVZrWnn+PXmDRhATTTTppXCcKBXduCvOyhj:XH/r/XkSZcZjpG15tVcnnWpyIDhjL
- TLSH T16A73081BF15360FCC25BC274CAEA1633E772786495342F6E57A0D6762E71AA07E38B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.