General
- Target VaAux2_64.dll
- Size 1.7MB
- Sample260903-2ee5wattex
- SHA256 d19b63c29337e2b077a54885fa1c67d93a7ec69e0c512b6a8ee435f49acd5fd0
- MD5 49e226426b01c70b396953d8bba6af4c
- SHA1 e6ad1eced5cadb2e109398e788e7a092ef171f4b
- SHA512 08238742dacaa075dbb0b43dcd069ac4a489f4bce84c836928bd89b67627e46d5bf30a052673c8cb6de795741312fcb113f4ee24ee897e88a17d13eab6b8dfdf
- SSDEEP 24576:f7H+pVEsE2jGbX24aLShqA5RqLH4uGs34YB+g+VE2dYPH3Z55PTnbWVQP40nqgZs:zH+NGiUdM+oPH3X5PTb5Pde3agh28Gg
- TLSH T135858C0AFA6581E1C07BC0BDD593662EF9B130A54B305BC757449B5A1F33BE4AA3E360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VaAux2_64.dll
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
VaAux2_64.dll
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target VaAux2_64.dll
- Size 1.7MB
- SHA256 d19b63c29337e2b077a54885fa1c67d93a7ec69e0c512b6a8ee435f49acd5fd0
- MD5 49e226426b01c70b396953d8bba6af4c
- SHA1 e6ad1eced5cadb2e109398e788e7a092ef171f4b
- SHA512 08238742dacaa075dbb0b43dcd069ac4a489f4bce84c836928bd89b67627e46d5bf30a052673c8cb6de795741312fcb113f4ee24ee897e88a17d13eab6b8dfdf
- SSDEEP 24576:f7H+pVEsE2jGbX24aLShqA5RqLH4uGs34YB+g+VE2dYPH3Z55PTnbWVQP40nqgZs:zH+NGiUdM+oPH3X5PTb5Pde3agh28Gg
- TLSH T135858C0AFA6581E1C07BC0BDD593662EF9B130A54B305BC757449B5A1F33BE4AA3E360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.