Overview

overview

9

Static

static

7

APP.exe

windows7_x64

9

APP.exe

windows10_x64

9

Resubmissions

29/02/2024, 21:22

240229-z717psch4z

23/03/2023, 01:23

230323-bsajfacf54

26/10/2021, 12:58

211026-p7hegshea4

23/10/2021, 13:49

211023-q4pj3acda69

27/09/2021, 16:25

210927-tw86aahecn10

27/09/2021, 16:15

210927-tp7c4shebk10

27/09/2021, 16:01

210927-tgfv7ahdfp

25/09/2021, 21:37

210925-1glj1adhh79

24/09/2021, 00:57

210924-bbd6asfdgj10

24/09/2021, 00:56

210924-bad4xafdfr9

Sharing

Copy URL Twitter E-mail

General

  • Target
    APP.exe.zip
  • Size 5.2MB
  • Sample210924-bad4xafdfr
  • SHA256 b70b9039ec4b33987a991c5c20729eb3310d7406b8d15161037df3b21fd968bb
  • MD5 SHA1 SHA512
Score
9/10
evasionthemidatrojan

Malware Config

Targets

    • Target
      APP.exe
    • Size 5.2MB
    • SHA256 72cb50e5791e1fcb11d24bc4cff3b44379a529c5549fbf6f500adcd67bfe9139
    • MD5 SHA1 SHA512
    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks