General
- Target virtualdj.exe
- Size 535.0MB
- Sample260813-cac3aahp4t
- SHA256 21dcca42905ff47bb9d2d8978089270228333ed94543f98ee3297cd63ea7b29b
- MD5 d22047266036717ff3c3feaebd81868c
- SHA1 c392268a6a2665e56d963ec16d66dbed13abf34a
- SHA512 383e117ae9f74cd0fb60b39826d6ba45ee3f3ff17f4ea5a4d7e0efbe103e5ffdcc27964c3d5bfeeaad4337c14431c130b5cb5743b865ed71e163a81f2b20f1af
- SSDEEP 12582912:EfqX0qYapqy6luTI8gLtQZdi8r16qc9gZUdPLGzfIkZR3UAIEAbEGw+anJq2ZIuS:diapqylsumiU6+dPLDMmREcaTZGf
- TLSH T12B492292B3B501D5D0BBD1B8C6A75613EBB2301903305BEB1695966A3F277F0AE7E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
virtualdj.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
virtualdj.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target virtualdj.exe
- Size 535.0MB
- SHA256 21dcca42905ff47bb9d2d8978089270228333ed94543f98ee3297cd63ea7b29b
- MD5 d22047266036717ff3c3feaebd81868c
- SHA1 c392268a6a2665e56d963ec16d66dbed13abf34a
- SHA512 383e117ae9f74cd0fb60b39826d6ba45ee3f3ff17f4ea5a4d7e0efbe103e5ffdcc27964c3d5bfeeaad4337c14431c130b5cb5743b865ed71e163a81f2b20f1af
- SSDEEP 12582912:EfqX0qYapqy6luTI8gLtQZdi8r16qc9gZUdPLGzfIkZR3UAIEAbEGw+anJq2ZIuS:diapqylsumiU6+dPLDMmREcaTZGf
- TLSH T12B492292B3B501D5D0BBD1B8C6A75613EBB2301903305BEB1695966A3F277F0AE7E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL