General
- Target loader.exe
- Size 2.2MB
- Sample260820-tdpzpaed24
- SHA256 57509ccda066fe68f1ba8203871bb73261d605e360dbb57778a27e1f7d390687
- MD5 873d9981beea6257802bd1a3c3d97741
- SHA1 7670f58128cb7705fd8f7909c04c6c35c31e7dd8
- SHA512 0a957e0f362ec1ff0e8829a8e45d78b30f98f35684a6135757d10ae9fecb4c8bd1280346941e14e2aaeee6c8d9fbff6d7f95b64d8449ace23eb42088dc79a27b
- SSDEEP 49152:573spPR0ngrGebrd2JfdiAx3g4K+bh+GX1wwuL1uhnm:1e2JfdiAx3g4K+bwf1
- TLSH T1B2B5CF4BF3A156ADD1B3B038C5A69323EB727818032197DF27858625EF276E05F3A741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target loader.exe
- Size 2.2MB
- SHA256 57509ccda066fe68f1ba8203871bb73261d605e360dbb57778a27e1f7d390687
- MD5 873d9981beea6257802bd1a3c3d97741
- SHA1 7670f58128cb7705fd8f7909c04c6c35c31e7dd8
- SHA512 0a957e0f362ec1ff0e8829a8e45d78b30f98f35684a6135757d10ae9fecb4c8bd1280346941e14e2aaeee6c8d9fbff6d7f95b64d8449ace23eb42088dc79a27b
- SSDEEP 49152:573spPR0ngrGebrd2JfdiAx3g4K+bh+GX1wwuL1uhnm:1e2JfdiAx3g4K+bwf1
- TLSH T1B2B5CF4BF3A156ADD1B3B038C5A69323EB727818032197DF27858625EF276E05F3A741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.
-
Suspicious use of NtSetInformationThreadHideFromDebugger