General
- Target 03a706cc6016c7fcdec201a6189aa109a4a6b0f4d5b3d87b5ab1f11e55da65d9
- Size 8.0MB
- Sample260908-qqcnca1ejb
- SHA256 03a706cc6016c7fcdec201a6189aa109a4a6b0f4d5b3d87b5ab1f11e55da65d9
- MD5 a0e3278750b7160e96a6cc1ffe118091
- SHA1 d3a2803865f3a5ac166c22106f89ca55a4f6382c
- SHA512 6f48d9623e91f54f872665962015e6c2b984d8ee52b64a55b63fda1775a173c842acae51819e59e2d3e80d284cd7f6b72dae9c3f5aef4d673f79ece57768c57b
- SSDEEP 196608:0ayFlgmoTvtvzSb4TkPVop0gTXJMUznzn3WKNG:OwqUgtomyri
- TLSH T1B186121BD66344EDC95FC1348367DAB2AE20FC29063479BF19A4D7312F61D908B6EB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
03a706cc6016c7fcdec201a6189aa109a4a6b0f4d5b3d87b5ab1f11e55da65d9.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 03a706cc6016c7fcdec201a6189aa109a4a6b0f4d5b3d87b5ab1f11e55da65d9
- Size 8.0MB
- SHA256 03a706cc6016c7fcdec201a6189aa109a4a6b0f4d5b3d87b5ab1f11e55da65d9
- MD5 a0e3278750b7160e96a6cc1ffe118091
- SHA1 d3a2803865f3a5ac166c22106f89ca55a4f6382c
- SHA512 6f48d9623e91f54f872665962015e6c2b984d8ee52b64a55b63fda1775a173c842acae51819e59e2d3e80d284cd7f6b72dae9c3f5aef4d673f79ece57768c57b
- SSDEEP 196608:0ayFlgmoTvtvzSb4TkPVop0gTXJMUznzn3WKNG:OwqUgtomyri
- TLSH T1B186121BD66344EDC95FC1348367DAB2AE20FC29063479BF19A4D7312F61D908B6EB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.
-
Suspicious use of NtSetInformationThreadHideFromDebugger