General
- Target 811001b4fe5eb474154af3d110215d2739798ce60882a621718be19c0fc4cef2.zip
- Size 746KB
- Sample260825-wghe5axbla
- SHA256 b2c2ce43c68341738fa3fa9d1efce6e41f425fa45e444e99f0519f5b0e366ec4
- MD5 f615b2148993f0627be1472e911d9958
- SHA1 8ae34e08f83769d02e0869a0e296a0d59cc24b08
- SHA512 fa287c494426b3d3099f81ab35bd475429d6eeb9f38d8db211e5b0ae306cfdc42bdaade5063d50a621a1895d6f51a0a2ecbf819669bb06e8c3f6656c078bf70c
- SSDEEP 12288:km5mnQ3oxu/mvp5Qalan+Xn5HHxQEP02L1Ri+g/5yUKpowahLWYw:DmCoyoA+HCEdg+g/50powaY
- TLSH T173F433E13CB1B553B266BDE842DDAC9A8B0D08F08B54F35FE8491055824FA1E65B3B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
811001b4fe5eb474154af3d110215d2739798ce60882a621718be19c0fc4cef2.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
811001b4fe5eb474154af3d110215d2739798ce60882a621718be19c0fc4cef2.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 811001b4fe5eb474154af3d110215d2739798ce60882a621718be19c0fc4cef2
- Size 936KB
- SHA256 811001b4fe5eb474154af3d110215d2739798ce60882a621718be19c0fc4cef2
- MD5 16dcff8d7763c8d48cfd6993280f17f8
- SHA1 52604edab169e32f51c41466b5490036ea82eed9
- SHA512 f1524f00476a412079e15d9f80658167e8762f2f35646f93479108d18a19d6ed78c16a5259896a2656aa9ea06b8359ade33add8245dc6ebdfe58f339a099930f
- SSDEEP 24576:5pXA4PQoRbeIzW4iEZ31m2Rx2+siA/s8:5pRDiEB1vRYd/
- TLSH T17715F142779716EAE6738D3886A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Looks for VMWare Tools registry key
-
Suspicious use of NtSetInformationThreadHideFromDebugger