General
- Target PukVisualLoader.exe
- Size 936KB
- Sample261024-var6bacy2p
- SHA256 1b1e299bbd4e2fc60e528a26840bb7c322ac908877a26e46a30b5d67f101bfeb
- MD5 88389ad7356aabf37a2bc275510c9a55
- SHA1 bf17c59216656f177428a33fbd8c62296a6b6e90
- SHA512 8995a6ea43c5d2aeb4f1d532b016d7c91112b48c60e550249e5b809e4eeda0dc0439b08cdb6a93be5fab15663b6527a35d4e37740d87ae70ca36b5bcffe2c379
- SSDEEP 24576:JpXA4PQoRbeIzW4iEZ31m2Rx2+siA/s8:JpRDiEB1vRYd/
- TLSH T1BC15F142779716EAE6738D3889A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
PukVisualLoader.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
PukVisualLoader.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target PukVisualLoader.exe
- Size 936KB
- SHA256 1b1e299bbd4e2fc60e528a26840bb7c322ac908877a26e46a30b5d67f101bfeb
- MD5 88389ad7356aabf37a2bc275510c9a55
- SHA1 bf17c59216656f177428a33fbd8c62296a6b6e90
- SHA512 8995a6ea43c5d2aeb4f1d532b016d7c91112b48c60e550249e5b809e4eeda0dc0439b08cdb6a93be5fab15663b6527a35d4e37740d87ae70ca36b5bcffe2c379
- SSDEEP 24576:JpXA4PQoRbeIzW4iEZ31m2Rx2+siA/s8:JpRDiEB1vRYd/
- TLSH T1BC15F142779716EAE6738D3889A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Looks for VMWare Tools registry key
-
Suspicious use of NtSetInformationThreadHideFromDebugger