050e1b254473b7bbb2214fe09aa93f2dc01793331106edb7f03fc834ca0a6b17

Resubmissions

16/08/2021, 11:47

210816-rdppjts4ax9

09/07/2021, 17:22

210709-kqt43n2hz69

09/07/2021, 17:14

210709-h55grz443x9

Sharing

Copy URL Twitter E-mail

General

Target
Vape V4.exe
Size 42KB
Sample210816-rdppjts4ax
SHA256 050e1b254473b7bbb2214fe09aa93f2dc01793331106edb7f03fc834ca0a6b17
MD5 919b60c62ed64aa128f5a73f4c1a4b4f
SHA1 23178189e308ca9e814caa2cad4ddf472e726b3f
SHA512 37941898baa7353e63b0934d80a931746bdfe5219e2972eec6dc6c05057ec420489331cf8313be21df69bb8e0f3f8a58279c27d458d241ba225e169e027d0817
MD5 SHA1 SHA512

Score

9^/10

evasion

Malware Config

Targets

- Target
  Vape V4.exe
- Size 42KB
- SHA256 050e1b254473b7bbb2214fe09aa93f2dc01793331106edb7f03fc834ca0a6b17
- MD5 919b60c62ed64aa128f5a73f4c1a4b4f
- SHA1 23178189e308ca9e814caa2cad4ddf472e726b3f
- SHA512 37941898baa7353e63b0934d80a931746bdfe5219e2972eec6dc6c05057ec420489331cf8313be21df69bb8e0f3f8a58279c27d458d241ba225e169e027d0817
- MD5 SHA1 SHA512
Score

9^/10

evasion
- Looks for VirtualBox Guest Additions in registry
  evasion
- Looks for VMWare Tools registry key
  evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

T1130

Modify Registry

T1112

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Looks for VirtualBox Guest Additions in registry

Looks for VMWare Tools registry key

Checks BIOS information in registry

Looks up external IP address via web service

Maps connected drives based on registry

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2