General

  • Target
    New Order#2030404.exe
  • Size 96KB
  • Sample201109-vfd38kvr3e
  • SHA256 d11cef47f0e97409844b3bc448cfabcfd7f97a4289012ba50e4b7175f5f4c870
  • MD5 SHA1 SHA512
Score
7/10

Malware Config

Targets

    • Target
      New Order#2030404.exe
    • Size 96KB
    • SHA256 d11cef47f0e97409844b3bc448cfabcfd7f97a4289012ba50e4b7175f5f4c870
    • MD5 SHA1 SHA512
    Score
    7/10
    • Checks QEMU agent state file

      Checks state file used by QEMU agent, possibly to detect virtualization.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v6

Tasks