General
- Target d5e448f33f65907da582c977d79b792a7d183cf3df1c45ccc03310ccdd630c4f.bin.exe
- Size 96.0MB
- Sample260910-ta8bvsdp2s
- SHA256 d5e448f33f65907da582c977d79b792a7d183cf3df1c45ccc03310ccdd630c4f
- MD5 8edca975a31c0596133bbcc0086b8921
- SHA1 7ad6574605b5c7bcc8c0cc1f3d4501e472f0f326
- SHA512 592ecc9c0f5a5eacb40b7c79a0432b9e49c0caff568c3ab2d40b7553f24db46168097200c40738778ccadca05758d63d7bc75ca43816249d92bcd62c9dba77bb
- SSDEEP 1572864:MIoHxJBMXYM8OKrFt4i6zlJn7VaFsmShr3qeTzKqnff3p4CM+7X2ylc2zw2PGh+r:chM1pn7VaF+hraePXnH3p4CMw2yRcNUj
- TLSH T1E4282303BA5442A4D8A58F39C4BB524377747C8C8F3177EB6E54AA386F757C0A8B6B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d5e448f33f65907da582c977d79b792a7d183cf3df1c45ccc03310ccdd630c4f.bin.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
d5e448f33f65907da582c977d79b792a7d183cf3df1c45ccc03310ccdd630c4f.bin.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target d5e448f33f65907da582c977d79b792a7d183cf3df1c45ccc03310ccdd630c4f.bin.exe
- Size 96.0MB
- SHA256 d5e448f33f65907da582c977d79b792a7d183cf3df1c45ccc03310ccdd630c4f
- MD5 8edca975a31c0596133bbcc0086b8921
- SHA1 7ad6574605b5c7bcc8c0cc1f3d4501e472f0f326
- SHA512 592ecc9c0f5a5eacb40b7c79a0432b9e49c0caff568c3ab2d40b7553f24db46168097200c40738778ccadca05758d63d7bc75ca43816249d92bcd62c9dba77bb
- SSDEEP 1572864:MIoHxJBMXYM8OKrFt4i6zlJn7VaFsmShr3qeTzKqnff3p4CM+7X2ylc2zw2PGh+r:chM1pn7VaF+hraePXnH3p4CMw2yRcNUj
- TLSH T1E4282303BA5442A4D8A58F39C4BB524377747C8C8F3177EB6E54AA386F757C0A8B6B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Enumerates VirtualBox registry keys
Identifies VirtualBox via ACPI registry values (likely anti-VM)
Looks for VirtualBox Guest Additions in registry
Looks for VMWare Tools registry key
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
Checks system information in the registry
System information is often read in order to detect sandboxing environments.