General
- Target WyvernLoader.exe
- Size 17.3MB
- Sample260823-x4sp2sbb42
- SHA256 32c1b25119d7ccd6905c6fd47d72cefabbd321c18239989a1587c88e930ff961
- MD5 678226d29a31c966d9ecf13bb5c99657
- SHA1 6ad8620d987558aeb4ac43dc90d31e58c7c0a030
- SHA512 b843e1175b7d26016e62c01ed0aca2e2f51c2c441cd3c535067c40b823cd1e24f2541fbe4854d35f775315f9ed2ed34fd6ab961f77ce38f0646acf24b80b6487
- SSDEEP 393216:SlBesQVE8+hO7waH3Qa5/fT+Ke+p0dJu0qRn2WVs1//CY:xsQVpGOtHgof/mdJu0ZjV/CY
- TLSH T1070722DAA0A011EEC492C570E38D5BEEF19538690EB95C1BBFC719401B32C5ADCA6D37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WyvernLoader.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target WyvernLoader.exe
- Size 17.3MB
- SHA256 32c1b25119d7ccd6905c6fd47d72cefabbd321c18239989a1587c88e930ff961
- MD5 678226d29a31c966d9ecf13bb5c99657
- SHA1 6ad8620d987558aeb4ac43dc90d31e58c7c0a030
- SHA512 b843e1175b7d26016e62c01ed0aca2e2f51c2c441cd3c535067c40b823cd1e24f2541fbe4854d35f775315f9ed2ed34fd6ab961f77ce38f0646acf24b80b6487
- SSDEEP 393216:SlBesQVE8+hO7waH3Qa5/fT+Ke+p0dJu0qRn2WVs1//CY:xsQVpGOtHgof/mdJu0ZjV/CY
- TLSH T1070722DAA0A011EEC492C570E38D5BEEF19538690EB95C1BBFC719401B32C5ADCA6D37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Suspicious use of NtSetInformationThreadHideFromDebugger