General
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://mega.nz/file/V9UzmQqb#yiHdxdBnKgZKIOr5a8Ka_rUojMaR6thk901zfdqCfds
Resource
win10v2004-20240611-en
20 signatures
1800 seconds
Behavioral task
behavioral2
Sample
https://mega.nz/file/V9UzmQqb#yiHdxdBnKgZKIOr5a8Ka_rUojMaR6thk901zfdqCfds
Resource
win11-20240611-en
6 signatures
1800 seconds
Malware Config
Targets
-
-
Target
https://mega.nz/file/V9UzmQqb#yiHdxdBnKgZKIOr5a8Ka_rUojMaR6thk901zfdqCfds
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Drops file in Drivers directory
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-