General
- Target wrah.exe
- Size 77KB
- Sample260812-vtkwcay1dz
- SHA256 cc5cd0f8a7b70bdbbb169cbf712fce11355999379c0bcb9df857dd5f78cb468a
- MD5 57013ea54f8fc5614a3b79c78da99eeb
- SHA1 755da36018949d8e33851898efecaefb83500a60
- SHA512 20aa7b3f1f08ef761b22844eaae7540136ec5e6db8735abc4e1ffb54037dd76d12ff9af2de81bfc262f87097acc52281311a35a68c302b977713eceb94865c1d
- SSDEEP 768:v5hfEOhp3CZo3Yb49OpG1uiGTpmrNFc3KuoZ4DC3BXd9z5OjSxb/7ahrKr1dqrPN:v55EOhsoooOpG1Om5F8foZCB+/
- TLSH T18373F81BF15320FCC62AC174CAE62632E7727C6455307F6E57A0DA762F71A606E38B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
wrah.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
wrah.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target wrah.exe
- Size 77KB
- SHA256 cc5cd0f8a7b70bdbbb169cbf712fce11355999379c0bcb9df857dd5f78cb468a
- MD5 57013ea54f8fc5614a3b79c78da99eeb
- SHA1 755da36018949d8e33851898efecaefb83500a60
- SHA512 20aa7b3f1f08ef761b22844eaae7540136ec5e6db8735abc4e1ffb54037dd76d12ff9af2de81bfc262f87097acc52281311a35a68c302b977713eceb94865c1d
- SSDEEP 768:v5hfEOhp3CZo3Yb49OpG1uiGTpmrNFc3KuoZ4DC3BXd9z5OjSxb/7ahrKr1dqrPN:v55EOhsoooOpG1Om5F8foZCB+/
- TLSH T18373F81BF15320FCC62AC174CAE62632E7727C6455307F6E57A0DA762F71A606E38B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.