General
- Target inj.zip
- Size 616KB
- Sample260831-1dn6qaae22
- SHA256 d4c1eb927a76788a4c35dfd8e35bb70d3dd046968f293d97fc960685a654982c
- MD5 444fcbc62221d71335ef8c418302d2fe
- SHA1 26d4d215dbb7adb25d75cffd2fc5b8b4f45e9994
- SHA512 133af57f8e488f659faac57b7b7e34e3918ed1c0d4f39f9034cd4991ec9de97b57e7679ca6c8bebba91eb0ecd6db6f119c29e91cd35a5c8ff7fa47292822773b
- SSDEEP 12288:weSGDlXg0KTydDzoTYPbb2RrYmgjaE8oUxfj6G/b7Z4I0ydU9Cn6tW:we/Dmou8b2RrvguLj/b7D0uU93tW
- TLSH T150D423638281ABB68FD992B0ABFF21D5B09EC12CD201D2D743CDC3466B14D197A2597F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
inj/Custome DLLS/r6-internal-example.dll
Resource
win10v2004-20260513-de
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
inj/dsa123xsa.exe
Resource
win10v2004-20260513-de
6 signatures
900 seconds
Malware Config
Targets
-
- Target inj/Custome DLLS/r6-internal-example.dll
- Size 956KB
- SHA256 c1af86e274dba6114a4ff54aa3d6d38e0e428afdfe41cc20c23c77bf2f8494f6
- MD5 fdc8bd46287ad5d4104163298f57191e
- SHA1 cc6e7978b2f4b33db4c77e20beed745eac149475
- SHA512 a25a87bbf1f1dfde2e5a619793830f23421cfb2638d113e141476557ed6cbdf40ac5214443a9ba6b43529d624af7cca595c17b88fdda74b2fcbb674ee52e2c4c
- SSDEEP 24576:n5ROFgKOGR7JcTjbe9nes3qgSIhgxbkFTRhQgkvu4i5jC:i6KTJcTjb8nx3/CkFTRhQgkvu4i5jC
- TLSH T13D257CB2EE02B2DAD43564364497230B97B5B5685B00CBD352D8192DFF437A82DB32DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target inj/dsa123xsa.exe
- Size 485KB
- SHA256 c7a593ae87aca3fb6caf300b6bc1b2e01d70e0a41fb635da781c3dd51f679f51
- MD5 34702da3dc337236936bceb95db40db5
- SHA1 b90867217e58d253e4c5f4c6540247435c61594d
- SHA512 a283aa6b7b2f99ce9d32724ba736ed8dd0bb0e654648f6b070037bacba89a27aa82f21eff0785af3af4aabde08733d9777fda1e16ef9d2574803da8bcc7d4ef7
- SSDEEP 6144:qLHTA28BHHzs7HtI4V6CtMtDpXuOJIIRXkrbbrDehZm9yzi+LcI/pJT+RiZws:75BHTF/XTziocoT+R
- TLSH T1BAB43A2552891EE8E07685F4AE967503F572380803719AFB47B49991DFE3290BF7BB03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.
-
Suspicious use of NtSetInformationThreadHideFromDebugger