General
-
Target
GTA 6 Builder-Install.zip
-
Size
14.9MB
-
Sample
240630-dwvd5awgqm
-
MD5
873cd3e4b90f41840bfaf642df1f9796
-
SHA1
ad89931f6b5726aa9417ee72955c2e57b446bb0b
-
SHA256
e7dc3d739ae6d011d8aac8f3c03b4b90fe38a8d77de0b87e278d81a007afeac6
-
SHA512
a394bcf26d404fe080d0b9405edee5c3f99adc7c282767ede751c6720bf16b20281e1bbdbd644c89dd666dd88a77c3bdb75c7ddb7957beb38491983bd00812db
-
SSDEEP
393216:0/xkF3ZVcLYYcowQYKQV01C1aNczWZWzhsFJ5G2K8hlQ:0C1rY66OzHhs75JKQQ
Behavioral task
behavioral1
Sample
GTA 6 Builder-Install.zip
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
GTA 6 Builder-Install.zip
-
Size
14.9MB
-
MD5
873cd3e4b90f41840bfaf642df1f9796
-
SHA1
ad89931f6b5726aa9417ee72955c2e57b446bb0b
-
SHA256
e7dc3d739ae6d011d8aac8f3c03b4b90fe38a8d77de0b87e278d81a007afeac6
-
SHA512
a394bcf26d404fe080d0b9405edee5c3f99adc7c282767ede751c6720bf16b20281e1bbdbd644c89dd666dd88a77c3bdb75c7ddb7957beb38491983bd00812db
-
SSDEEP
393216:0/xkF3ZVcLYYcowQYKQV01C1aNczWZWzhsFJ5G2K8hlQ:0C1rY66OzHhs75JKQQ
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-