Extracted

• • Target
    VirexTemp.rar
  • Size 1.3MB
  • SHA256 3204e9c669d61b2e59a8d139466f96a35456065706c84e260fcf77c7ab450620
  • MD5 8b1bb870c915a365bb360e1e8717b234
  • SHA1 e76ad4c7e73c3aecd677880cc6aea051f32110c8
  • SHA512 6505563f0625d14bca908919b74989661b92680d4f299747600bf25388d33d7239f588175d7e3e4059ee123d7eb9b729e123a88c2edfcf29af8b050f078e71e5
  • SSDEEP 24576:j31Z3BcZFCGzezQvFCBH8d51t8L6c8RCwxeRbhfm/6V4RxU75qoQ/Dbm6CpBvgyi:j3HINzgQ9aE5rER8s/RbPV4RxQlmbaTy
  • TLSH
    T19A553306BBFB5F18E89189F4BBDC95C454E599CF6991346C82B0B001BBA2DB38D54BE0
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryexecution

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Executes dropped EXE

  behavioral1behavioral2