acabd1f99b9e449d951dea975e1f1ad5
General
Target
Size
Sample
acabd1f99b9e449d951dea975e1f1ad5
1MB
220117-tb7rqabaa8
Score
10 /10
MD5
SHA1
SHA256
SHA512
acabd1f99b9e449d951dea975e1f1ad5
ef545ca153737d6246be2cd3de1b26fb92241327
63e38dc331cd8b202d9109dd5b0e08162673c0661344a06252811d066548c31b
e92d6a0f11d2d96267682eed231e8f5580e32df705bc6c0eeb0b6f7fbbe7c56c67267c8e1994c55bb724343e904137808e1fc9636750d2730aa42b3bf217abd1
Malware Config
Targets
Target
MD5
Filesize
acabd1f99b9e449d951dea975e1f1ad5
acabd1f99b9e449d951dea975e1f1ad5
1MB
Score
10/10
SHA1
SHA256
SHA512
ef545ca153737d6246be2cd3de1b26fb92241327
63e38dc331cd8b202d9109dd5b0e08162673c0661344a06252811d066548c31b
e92d6a0f11d2d96267682eed231e8f5580e32df705bc6c0eeb0b6f7fbbe7c56c67267c8e1994c55bb724343e904137808e1fc9636750d2730aa42b3bf217abd1
Tags
Signatures
-
Modifies Windows Defender Real-time Protection settings
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
Tags
TTPs
-
Downloads MZ/PE file
-
Executes dropped EXE
-
UPX packed file
Description
Detects executables packed with UPX/modified UPX open source packer.
Tags
-
Checks BIOS information in registry
Description
BIOS information is often read in order to detect sandboxing environments.
TTPs
-
Loads dropped DLL
-
Themida packer
Description
Detects Themida, an advanced Windows software protection system.
Tags
-
Adds Run key to start application
Tags
TTPs
-
Checks whether UAC is enabled
Tags
TTPs
-
Suspicious use of SetThreadContext
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Privilege Escalation
Tasks