General
- Target jogolegal.exe
- Size 15.0MB
- Sample260824-tbc74swvb1
- SHA256 d18531b2c62ccccae355d46fcd5cef23010d7f69d785f2d85abe7a774822cbbe
- MD5 c6825d8cee187ebce524f7214f3285d8
- SHA1 a0f7ccafca1e4a4faaeea1d77e029d7fb472b97a
- SHA512 41bff7d34235757d6c9637b5a45cbbc61551d0c0cc851e7c985f9b33421387f30e1753d96afadf0f02210abafce39013c5f8f9f0c968cb642392c15f9041284b
- SSDEEP 393216:rmRgvhPyJNplsvXhMSZjwg+cpm+I3Zr9ENNVduT9:rmsyJblqX2Swgdm+GBENN3K
- TLSH T16CF633A307FA6D87C47163707801D5F88A02B9E64F56B96CB0EE0792D916344CFF6B4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jogolegal.exe
Resource
win10ltsc2021-20260513-en
13 signatures
300 seconds
Behavioral task
behavioral2
Sample
jogolegal.exe
Resource
win11-20260513-en
10 signatures
300 seconds
Behavioral task
behavioral3
Sample
jogolegal.exe
Resource
win11ltsc2024-20260709-en
10 signatures
300 seconds
Malware Config
Targets
-
- Target jogolegal.exe
- Size 15.0MB
- SHA256 d18531b2c62ccccae355d46fcd5cef23010d7f69d785f2d85abe7a774822cbbe
- MD5 c6825d8cee187ebce524f7214f3285d8
- SHA1 a0f7ccafca1e4a4faaeea1d77e029d7fb472b97a
- SHA512 41bff7d34235757d6c9637b5a45cbbc61551d0c0cc851e7c985f9b33421387f30e1753d96afadf0f02210abafce39013c5f8f9f0c968cb642392c15f9041284b
- SSDEEP 393216:rmRgvhPyJNplsvXhMSZjwg+cpm+I3Zr9ENNVduT9:rmsyJblqX2Swgdm+GBENN3K
- TLSH T16CF633A307FA6D87C47163707801D5F88A02B9E64F56B96CB0EE0792D916344CFF6B4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger