General
- Target loader.exe
- Size 416KB
- Sample260827-s6cdmaab69
- SHA256 1d61ac91ba40d9f0bc69cee8ecac44a461c6f856762e0c3a0f24b7bff1b3b8a4
- MD5 56cd2a336c3fb4a294f75812c1450fa9
- SHA1 4f77534fa57a9662920822d21f6e1d6c16964cab
- SHA512 32e23de3857e02d3504c9e30ef76fc611780d300a75ce9e137fcd7170a63da7d1328dddb92a1992a9d3db9c329f6c847ea75b1d8a3f0d4832071899afa87cb56
- SSDEEP 12288:Clgp/2+my2z1y7avaLbWvo55ZTpBwArhe:Cqp/23RaPWvo55ZTLwArhe
- TLSH T1E7945A29E65404B8E1B7D178CE578803F77278890375EAEB17D1E9B20F175E4AA3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target loader.exe
- Size 416KB
- SHA256 1d61ac91ba40d9f0bc69cee8ecac44a461c6f856762e0c3a0f24b7bff1b3b8a4
- MD5 56cd2a336c3fb4a294f75812c1450fa9
- SHA1 4f77534fa57a9662920822d21f6e1d6c16964cab
- SHA512 32e23de3857e02d3504c9e30ef76fc611780d300a75ce9e137fcd7170a63da7d1328dddb92a1992a9d3db9c329f6c847ea75b1d8a3f0d4832071899afa87cb56
- SSDEEP 12288:Clgp/2+my2z1y7avaLbWvo55ZTpBwArhe:Cqp/23RaPWvo55ZTLwArhe
- TLSH T1E7945A29E65404B8E1B7D178CE578803F77278890375EAEB17D1E9B20F175E4AA3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.
-
Drops file in System32 directory