General
- Target Kumper.exe
- Size 3.0MB
- Sample260907-bzzf5stzes
- SHA256 ab97f2013e10209cf7f44994cd0ae1bc4ad7dbee86021ed078953f95043b86d0
- MD5 b140c7f237248d35255fc0be1c9eebbf
- SHA1 ee0269c042300ceb2c0d4e1bd5f69cbf8a256968
- SHA512 998c5e6970b30a76eaafaf847b8a6504875630d7772980a9399bca230919e2e863ec02a5102cbffee34654069fd0ba4e5b19e8f9d5c5c1c8554f87f881963827
- SSDEEP 49152:gBZAcwqHYAt/VKNZ5APEhDonn1uUDUj+3+EmLzp/ETOmbOExh/B3OV/XG+4r/Y:QAcwNWPE2MLLzp/ETOmbOgM4r
- TLSH T135E5AE56A3B501E8C1B7D138CA469607FB72744813329BDB13E08A6A6F53BF16B3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Kumper.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Kumper.exe
- Size 3.0MB
- SHA256 ab97f2013e10209cf7f44994cd0ae1bc4ad7dbee86021ed078953f95043b86d0
- MD5 b140c7f237248d35255fc0be1c9eebbf
- SHA1 ee0269c042300ceb2c0d4e1bd5f69cbf8a256968
- SHA512 998c5e6970b30a76eaafaf847b8a6504875630d7772980a9399bca230919e2e863ec02a5102cbffee34654069fd0ba4e5b19e8f9d5c5c1c8554f87f881963827
- SSDEEP 49152:gBZAcwqHYAt/VKNZ5APEhDonn1uUDUj+3+EmLzp/ETOmbOExh/B3OV/XG+4r/Y:QAcwNWPE2MLLzp/ETOmbOgM4r
- TLSH T135E5AE56A3B501E8C1B7D138CA469607FB72744813329BDB13E08A6A6F53BF16B3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.
-
Suspicious use of NtSetInformationThreadHideFromDebugger