General
- Target dsa123xsa.exe
- Size 485KB
- Sample260905-na7sfadd83
- SHA256 c7a593ae87aca3fb6caf300b6bc1b2e01d70e0a41fb635da781c3dd51f679f51
- MD5 34702da3dc337236936bceb95db40db5
- SHA1 b90867217e58d253e4c5f4c6540247435c61594d
- SHA512 a283aa6b7b2f99ce9d32724ba736ed8dd0bb0e654648f6b070037bacba89a27aa82f21eff0785af3af4aabde08733d9777fda1e16ef9d2574803da8bcc7d4ef7
- SSDEEP 6144:qLHTA28BHHzs7HtI4V6CtMtDpXuOJIIRXkrbbrDehZm9yzi+LcI/pJT+RiZws:75BHTF/XTziocoT+R
- TLSH T1BAB43A2552891EE8E07685F4AE967503F572380803719AFB47B49991DFE3290BF7BB03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dsa123xsa.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
dsa123xsa.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target dsa123xsa.exe
- Size 485KB
- SHA256 c7a593ae87aca3fb6caf300b6bc1b2e01d70e0a41fb635da781c3dd51f679f51
- MD5 34702da3dc337236936bceb95db40db5
- SHA1 b90867217e58d253e4c5f4c6540247435c61594d
- SHA512 a283aa6b7b2f99ce9d32724ba736ed8dd0bb0e654648f6b070037bacba89a27aa82f21eff0785af3af4aabde08733d9777fda1e16ef9d2574803da8bcc7d4ef7
- SSDEEP 6144:qLHTA28BHHzs7HtI4V6CtMtDpXuOJIIRXkrbbrDehZm9yzi+LcI/pJT+RiZws:75BHTF/XTziocoT+R
- TLSH T1BAB43A2552891EE8E07685F4AE967503F572380803719AFB47B49991DFE3290BF7BB03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.
-
Suspicious use of NtSetInformationThreadHideFromDebugger