General
- Target Resolve.exe
- Size 1.1MB
- Sample261027-2p86pshs2m
- SHA256 9f0fa6068e9b234660342955ec6659624ac2386cf16872546240bedaf5702dbe
- MD5 3ecfb766a6a54fc5819fe173dad3f8d8
- SHA1 1afea4229377cec867fafbc860b6d63018ae9d64
- SHA512 b1c924e6ff1c0f039851836daa460d227b01cb34133382f6f2064fd684d2186cd694eb3c116e0e92d878d94322b7a45426fd50edf6f95fe1b486de16d0516a01
- SSDEEP 12288:UK95Vccf1P5aKhAuTIJTancB4zUsJwwM+aidUu5zR:n95V7P5aKC4zUWtai
- TLSH T16135AF1663E512D9E17BC17D8DF64A95EA72780807709BCF069062E81F27FE84E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Resolve.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Resolve.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Resolve.exe
- Size 1.1MB
- SHA256 9f0fa6068e9b234660342955ec6659624ac2386cf16872546240bedaf5702dbe
- MD5 3ecfb766a6a54fc5819fe173dad3f8d8
- SHA1 1afea4229377cec867fafbc860b6d63018ae9d64
- SHA512 b1c924e6ff1c0f039851836daa460d227b01cb34133382f6f2064fd684d2186cd694eb3c116e0e92d878d94322b7a45426fd50edf6f95fe1b486de16d0516a01
- SSDEEP 12288:UK95Vccf1P5aKhAuTIJTancB4zUsJwwM+aidUu5zR:n95V7P5aKC4zUWtai
- TLSH T16135AF1663E512D9E17BC17D8DF64A95EA72780807709BCF069062E81F27FE84E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VMWare services registry key.
-
Suspicious use of NtSetInformationThreadHideFromDebugger