General
- Target 07fa9210eb0172dd3e66bd0ff3965e8b4a76acc73e4452e7cbd8882411a3bd1b
- Size 5.8MB
- Sample260908-tb7rqaek2v
- SHA256 07fa9210eb0172dd3e66bd0ff3965e8b4a76acc73e4452e7cbd8882411a3bd1b
- MD5 207b37e9a6c4282c492a9530cdb1b5b5
- SHA1 2be4d962e565891235f4663fce1f98d2c68ad5aa
- SHA512 6a2fc806dd392a47e40dba83d99ca331d65a453f1e12517c524545d87687e078dc09167c6514c522c5b7ad74f253cc8a1177b975e372a918fded49d577076616
- SSDEEP 98304:y+DNZmAfFrp3V/QVANTw57fQXcBzsXx9bBE6lJE51tODMAML6Q6F0jDggy:ykFViVAm7YezsXrepcIAgmF03gH
- TLSH T12E56021BD6A384EDC55EC174C757DAB29A30BC29063479AF19A4D7312F22D908B3FB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
07fa9210eb0172dd3e66bd0ff3965e8b4a76acc73e4452e7cbd8882411a3bd1b.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 07fa9210eb0172dd3e66bd0ff3965e8b4a76acc73e4452e7cbd8882411a3bd1b
- Size 5.8MB
- SHA256 07fa9210eb0172dd3e66bd0ff3965e8b4a76acc73e4452e7cbd8882411a3bd1b
- MD5 207b37e9a6c4282c492a9530cdb1b5b5
- SHA1 2be4d962e565891235f4663fce1f98d2c68ad5aa
- SHA512 6a2fc806dd392a47e40dba83d99ca331d65a453f1e12517c524545d87687e078dc09167c6514c522c5b7ad74f253cc8a1177b975e372a918fded49d577076616
- SSDEEP 98304:y+DNZmAfFrp3V/QVANTw57fQXcBzsXx9bBE6lJE51tODMAML6Q6F0jDggy:ykFViVAm7YezsXrepcIAgmF03gH
- TLSH T12E56021BD6A384EDC55EC174C757DAB29A30BC29063479AF19A4D7312F22D908B3FB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.
-
Suspicious use of NtSetInformationThreadHideFromDebugger