Resubmissions

30/09/2026, 06:36

260930-hdc5cavfje9

30/09/2026, 06:35

260930-hcc3ys1w6l3

30/09/2026, 06:34

260930-hbs3sa1we19

30/09/2026, 06:31

260930-g911lsvcrg9

General

  • Target
    DirectX11 base.exe
  • Size 8.6MB
  • Sample260930-hbs3sa1we1
  • SHA256 c17b6ec247adeb960f677071e403a1a6ef5775a5c5446804ec8931294c04486b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      DirectX11 base.exe
    • Size 8.6MB
    • SHA256 c17b6ec247adeb960f677071e403a1a6ef5775a5c5446804ec8931294c04486b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Looks for VirtualBox Guest Additions in registry

    • Looks for VMWare Tools registry key

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks