General
- Target wrah.exe
- Size 76KB
- Sample260812-vr1tsay1dv
- SHA256 06309cf698e0e45822bdd2c8709d772e1082d48dcc34f043b7586696492d68b2
- MD5 3508ae10ac1e1380d82d61abf2750949
- SHA1 928652309c8dedba51d365621748bd169f584ba1
- SHA512 5bfd37f3f0a9dfdaf7b3252a2c9883570295c6994840fe80be5b938148c9e18047a42439900b5fdb4535cd5d0dab97f7ba447d3ac47c01b9f20d0b3732bd286b
- SSDEEP 768:2dwRhJOxMzqJ5yDL9wpG1uiGQunBP3ij1zWqmIY9zAfoC3BXd9M4OjSCuz6RDEq4:6wROx1yDRwpG1Cnp3WzWgY9zRdDcOj
- TLSH T10473081BF15320ECC61BC178CAEA1633E772786495342F6E57A0D5722F72AA17E38B05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
wrah.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
wrah.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target wrah.exe
- Size 76KB
- SHA256 06309cf698e0e45822bdd2c8709d772e1082d48dcc34f043b7586696492d68b2
- MD5 3508ae10ac1e1380d82d61abf2750949
- SHA1 928652309c8dedba51d365621748bd169f584ba1
- SHA512 5bfd37f3f0a9dfdaf7b3252a2c9883570295c6994840fe80be5b938148c9e18047a42439900b5fdb4535cd5d0dab97f7ba447d3ac47c01b9f20d0b3732bd286b
- SSDEEP 768:2dwRhJOxMzqJ5yDL9wpG1uiGQunBP3ij1zWqmIY9zAfoC3BXd9M4OjSCuz6RDEq4:6wROx1yDRwpG1Cnp3WzWgY9zRdDcOj
- TLSH T10473081BF15320ECC61BC178CAEA1633E772786495342F6E57A0D5722F72AA17E38B05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.