General
- Target d6877f2b208393801e4e65a58c8a9cb15a547cd56f09e9ed0937a6e7b21a5f44
- Size 1.5MB
- Sample260826-p7ptkazbpc
- SHA256 d6877f2b208393801e4e65a58c8a9cb15a547cd56f09e9ed0937a6e7b21a5f44
- MD5 e4a0245c69e8b9bd5bc571710dadece2
- SHA1 47f3d40d5e6f6158b7fb447e3d6657891b007b0e
- SHA512 680d78b5d546a2963b7a5efb6768c872d0d7073fcac6de6123d70fb6f0a3f92cd853145571dcfcdae972296799931a45ad278d7314907b6d240c15039fd15116
- SSDEEP 24576:RRyCwwZjADoHwWYLIKzYjLlxCBGUrU7JMrNkBAcKE6uKDUqW9d5Vv7Z9u:RRR7Z9HwT8Kzqlx6SdMrGBLZ6ur9d5l6
- TLSH T1A475E02031D4B932E6424BB51EB849B91429542A57A2D0DFF7E4EE7F375E0F0B6608F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d6877f2b208393801e4e65a58c8a9cb15a547cd56f09e9ed0937a6e7b21a5f44.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target d6877f2b208393801e4e65a58c8a9cb15a547cd56f09e9ed0937a6e7b21a5f44
- Size 1.5MB
- SHA256 d6877f2b208393801e4e65a58c8a9cb15a547cd56f09e9ed0937a6e7b21a5f44
- MD5 e4a0245c69e8b9bd5bc571710dadece2
- SHA1 47f3d40d5e6f6158b7fb447e3d6657891b007b0e
- SHA512 680d78b5d546a2963b7a5efb6768c872d0d7073fcac6de6123d70fb6f0a3f92cd853145571dcfcdae972296799931a45ad278d7314907b6d240c15039fd15116
- SSDEEP 24576:RRyCwwZjADoHwWYLIKzYjLlxCBGUrU7JMrNkBAcKE6uKDUqW9d5Vv7Z9u:RRR7Z9HwT8Kzqlx6SdMrGBLZ6ur9d5l6
- TLSH T1A475E02031D4B932E6424BB51EB849B91429542A57A2D0DFF7E4EE7F375E0F0B6608F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext