General
- Target 550058df769d4b6148e61374c46e664839861a0c747480fe75ec00a3335afaf3
- Size 510KB
- Sample260824-mgpd1afj91
- SHA256 550058df769d4b6148e61374c46e664839861a0c747480fe75ec00a3335afaf3
- MD5 d7fd6edc388140ee215bec52d7b748a1
- SHA1 47dd3471b1a201a2bb1b6126750a8d2612852277
- SHA512 df1753b01c57a27c568109ac201832ac8ace9ac66d899c122bb5d1fd046a917e9a6fbbee64d2e4cab8a3d2bd9ae7bbd3d450647200eea381b9bf496ef4696e26
- SSDEEP 12288:uMrdRnH5zCeU+qq8PUvkjivx1zDVngsoBjWu:uMrdRnH5zW+daUcWZxVngjP
- TLSH T1ADB4E035B8708076DD260D338B9DE2314EBB7832093ED67BE785C62A5F6019897D931E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
550058df769d4b6148e61374c46e664839861a0c747480fe75ec00a3335afaf3.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 550058df769d4b6148e61374c46e664839861a0c747480fe75ec00a3335afaf3
- Size 510KB
- SHA256 550058df769d4b6148e61374c46e664839861a0c747480fe75ec00a3335afaf3
- MD5 d7fd6edc388140ee215bec52d7b748a1
- SHA1 47dd3471b1a201a2bb1b6126750a8d2612852277
- SHA512 df1753b01c57a27c568109ac201832ac8ace9ac66d899c122bb5d1fd046a917e9a6fbbee64d2e4cab8a3d2bd9ae7bbd3d450647200eea381b9bf496ef4696e26
- SSDEEP 12288:uMrdRnH5zCeU+qq8PUvkjivx1zDVngsoBjWu:uMrdRnH5zW+daUcWZxVngjP
- TLSH T1ADB4E035B8708076DD260D338B9DE2314EBB7832093ED67BE785C62A5F6019897D931E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)