General
- Target PukVisualLoader.exe
- Size 936KB
- Sample261024-t8cb3saz8x
- SHA256 b8e524e044085d25ce8e9f6a41c1f34fcad14919ee98dfb3ab29aa8d87f7fef5
- MD5 5ac6dd9a980cbd4298a70ebf0fb27959
- SHA1 174238aecc9f600bb13c1d38564dfe322d27766d
- SHA512 7174daf29fa15bf366270b100ccc61dd3173777acdede1caabc4d22604b9c147555ffcf7544b225fe3df4007f17ffbdfc23e4ffb885b3c1cf3044077e511c9fd
- SSDEEP 24576:JpXA4LQoRbeIzW4iEZ31m2Rx2+siA/s8:JpNDiEB1vRYd/
- TLSH T12315F142779716EAE6738D3889A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
PukVisualLoader.exe
Resource
win11-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target PukVisualLoader.exe
- Size 936KB
- SHA256 b8e524e044085d25ce8e9f6a41c1f34fcad14919ee98dfb3ab29aa8d87f7fef5
- MD5 5ac6dd9a980cbd4298a70ebf0fb27959
- SHA1 174238aecc9f600bb13c1d38564dfe322d27766d
- SHA512 7174daf29fa15bf366270b100ccc61dd3173777acdede1caabc4d22604b9c147555ffcf7544b225fe3df4007f17ffbdfc23e4ffb885b3c1cf3044077e511c9fd
- SSDEEP 24576:JpXA4LQoRbeIzW4iEZ31m2Rx2+siA/s8:JpNDiEB1vRYd/
- TLSH T12315F142779716EAE6738D3889A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Looks for VMWare Tools registry key
-
Suspicious use of NtSetInformationThreadHideFromDebugger