General
- Target TOS_SHIT_OLD.rar
- Size 9.3MB
- Sample261024-e8kacssvex
- SHA256 ac4aca1ad9e4d9d417d6767589afa8b532bf3f55435a815efe8c5e4c906d350a
- MD5 d6722f3be2417b435f073aabf4730e74
- SHA1 b86825d66d5e02d3e00b002b6a99166d4ba176fd
- SHA512 1b57619effb5a05a663083d3f8710534eb10f87cc3affed47e95cbd172cffc3d271cae4bdbdea5ba7155b1041ce6442cd58436fdfe3232319d4dc3a18e46e154
- SSDEEP 196608:jYZKiR95eeovxSeg917qVLfrPmJJB4lWOW8Hssfgy1AiROMNbp5n:js9f60eoGVLfzmJU0Bsf11Aq
- TLSH T192A6338E07C2C3941AE01713EED5C7313DAEE00221F653A66AF719AA1722DD76D5F6D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
TOS_SHIT_OLD/TOS.exe
Resource
win10ltsc2021-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
TOS_SHIT_OLD/TOS.exe
Resource
win11-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target TOS_SHIT_OLD/TOS.exe
- Size 26.5MB
- SHA256 f5518b1c1de5c7d9448cb0c33c0c0ab70b6139710615bd3d930c9ceef557bb04
- MD5 152286e5ead722318957ef1dc4cb0f94
- SHA1 74fe13783b89e6272b7d3685ccdc04f474ee5403
- SHA512 956ace64707cbafc412bf791650f7950dce01d5334bd9dbd33e125145b7c350ab96505020dc59f8b1123b00a8cdcf1d803a21170aa440cba36a5f29b3ab13b65
- SSDEEP 393216:na2MPf/g3l1KFdu9CwJsv6td5/3q/7LfVs/+QRlM8FVXtgQPdZeIT7aT9AlV+u8b:r3lRA7LfVs//MK9uxwQ1
- TLSH T18F578C5762A90185D46BD23DCB5BC613E7B3740583629BDB02A4CA563F73BE32A7E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Executes dropped EXE
-
Loads dropped DLL