General
- Target x6z0w0e12f.exe
- Size 2.8MB
- Sample260825-kmrefagj4z
- SHA256 e98531c0d4b7003f5f4283d57366dbb1f70b7fb22848aaa8fd9bc9bb932c27ff
- MD5 1042e65cf5eb5add373c3aa5483c5a9a
- SHA1 ebb2c904b87c6d91d686885df67862c978f70943
- SHA512 eea98e3fb19108e0c9b83ca885786b4b7c50a041f3e96110a26d16f827ef26bfd4f172785ae9567384cb5821d779a498d5e1a9c0240284a0a71dc4269b6e0973
- SSDEEP 49152:1EGJWXIKeSbTVXZUGqVJfby5BL/dUhkd1lltEacfO7lQTmBrEm3H77kJEDZGU84:rEV1vVXZpL1E+lPrcfqlQKBrdbSQG14
- TLSH T15CD53352FF415882D8B2AE78E9A6D3C91310FC189EA9A39738D77E5B8DF5BD02C00175
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
x6z0w0e12f.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
x6z0w0e12f.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target x6z0w0e12f.exe
- Size 2.8MB
- SHA256 e98531c0d4b7003f5f4283d57366dbb1f70b7fb22848aaa8fd9bc9bb932c27ff
- MD5 1042e65cf5eb5add373c3aa5483c5a9a
- SHA1 ebb2c904b87c6d91d686885df67862c978f70943
- SHA512 eea98e3fb19108e0c9b83ca885786b4b7c50a041f3e96110a26d16f827ef26bfd4f172785ae9567384cb5821d779a498d5e1a9c0240284a0a71dc4269b6e0973
- SSDEEP 49152:1EGJWXIKeSbTVXZUGqVJfby5BL/dUhkd1lltEacfO7lQTmBrEm3H77kJEDZGU84:rEV1vVXZpL1E+lPrcfqlQKBrdbSQG14
- TLSH T15CD53352FF415882D8B2AE78E9A6D3C91310FC189EA9A39738D77E5B8DF5BD02C00175
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled