General
- Target WyvernLoader.exe
- Size 18.0MB
- Sample260819-st24hsxcjd
- SHA256 b7b95e62b471cd1a379be30a864e9cf7c2bbbd1750bf817ac7e3fbd49c1d4a56
- MD5 9fcf20571ac563eaf0c0e2cb6efe9cb7
- SHA1 3aa602f4b71bddb6eb3ac2b3b57bd3218d679897
- SHA512 ef03a0e762fde54d9a94ab015b72e82dd2c195d0186e72179d82ff4fcf1e8c3902ce61364a46a2d64d265f7a16108b4987816da63510795d5e96257ffbb3b492
- SSDEEP 393216:EsiMnWh/EVmh0e29axiXFEE8fHptT6SIplX03qIzc3MZ/TbJqrAw8E8u:7iwWhsVwrjxiYfT6BHX0aIKMZfJqrAwr
- TLSH T1C21722D964D452FCC4928670E64E27FEF181385A4DBA5C2BBFC31A101A31C9AD8A7D37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WyvernLoader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
WyvernLoader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target WyvernLoader.exe
- Size 18.0MB
- SHA256 b7b95e62b471cd1a379be30a864e9cf7c2bbbd1750bf817ac7e3fbd49c1d4a56
- MD5 9fcf20571ac563eaf0c0e2cb6efe9cb7
- SHA1 3aa602f4b71bddb6eb3ac2b3b57bd3218d679897
- SHA512 ef03a0e762fde54d9a94ab015b72e82dd2c195d0186e72179d82ff4fcf1e8c3902ce61364a46a2d64d265f7a16108b4987816da63510795d5e96257ffbb3b492
- SSDEEP 393216:EsiMnWh/EVmh0e29axiXFEE8fHptT6SIplX03qIzc3MZ/TbJqrAw8E8u:7iwWhsVwrjxiYfT6BHX0aIKMZfJqrAwr
- TLSH T1C21722D964D452FCC4928670E64E27FEF181385A4DBA5C2BBFC31A101A31C9AD8A7D37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Suspicious use of NtSetInformationThreadHideFromDebugger