General
- Target SquadVisual.exe
- Size 8.8MB
- Sample260824-ntt1pasxet
- SHA256 95043b2bf5a0d1b8aeb98f4847ad703a1f775c36fee46501f9808dc10f2f7484
- MD5 51eff55ba893d5f0fe94cfe75718eda3
- SHA1 274af15c7a36d849a17da9bab497c21b72507d9b
- SHA512 c800e0e5a76dd0da3e19fc9500e3095c9938da62fefbd06021f3ddc35b3f3992d0fc197ffab7801ff847b8b4a0ba725da5d49ef998f45649c35156fc800df017
- SSDEEP 196608:9hcd3wLoMGa6DXEpXnH2ph1iut1/1QpL0uQg+RBtK7voKgpVFSZ:9hAEYnXEAphVtrQSg+RHK7vFgtS
- TLSH T18396232C724014EBEDA2273C5991F231D6F06AD03F76C79B6FA0255A3D23B9A2D716D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
SquadVisual.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
SquadVisual.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target SquadVisual.exe
- Size 8.8MB
- SHA256 95043b2bf5a0d1b8aeb98f4847ad703a1f775c36fee46501f9808dc10f2f7484
- MD5 51eff55ba893d5f0fe94cfe75718eda3
- SHA1 274af15c7a36d849a17da9bab497c21b72507d9b
- SHA512 c800e0e5a76dd0da3e19fc9500e3095c9938da62fefbd06021f3ddc35b3f3992d0fc197ffab7801ff847b8b4a0ba725da5d49ef998f45649c35156fc800df017
- SSDEEP 196608:9hcd3wLoMGa6DXEpXnH2ph1iut1/1QpL0uQg+RBtK7voKgpVFSZ:9hAEYnXEAphVtrQSg+RHK7vFgtS
- TLSH T18396232C724014EBEDA2273C5991F231D6F06AD03F76C79B6FA0255A3D23B9A2D716D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox drivers on disk
-
Looks for VMWare drivers on disk
-
Looks for VMWare services registry key.
-
Loads dropped DLL