b8931e787497efcd1306a1b86529f1d930084650fd6c38fd7051bc167b02e6fb
General
Target
Size
Sample
b8931e787497efcd1306a1b86529f1d930084650fd6c38fd7051bc167b02e6fb
1MB
220119-sr8hhsbag7
Score
10 /10
MD5
SHA1
SHA256
SHA512
600c20e18834769dc0ae528c69108a5d
743b942a951d381c0e3efc1fac3e2f09740769c2
b8931e787497efcd1306a1b86529f1d930084650fd6c38fd7051bc167b02e6fb
36079c25f17ce81de7ebe8b3225421191ba73c1f7a9cf049c7bbc818f8b2b5c157e279dc8e2aeb3d5addb93e233768792ad52a2e75218d55ddfeaf46e30e20ec
Malware Config
Targets
Target
MD5
Filesize
b8931e787497efcd1306a1b86529f1d930084650fd6c38fd7051bc167b02e6fb
600c20e18834769dc0ae528c69108a5d
1MB
Score
10/10
SHA1
SHA256
SHA512
743b942a951d381c0e3efc1fac3e2f09740769c2
b8931e787497efcd1306a1b86529f1d930084650fd6c38fd7051bc167b02e6fb
36079c25f17ce81de7ebe8b3225421191ba73c1f7a9cf049c7bbc818f8b2b5c157e279dc8e2aeb3d5addb93e233768792ad52a2e75218d55ddfeaf46e30e20ec
Tags
Signatures
-
Modifies Windows Defender Real-time Protection settings
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
Tags
TTPs
-
Downloads MZ/PE file
-
UPX packed file
Description
Detects executables packed with UPX/modified UPX open source packer.
Tags
-
Checks BIOS information in registry
Description
BIOS information is often read in order to detect sandboxing environments.
TTPs
-
Themida packer
Description
Detects Themida, an advanced Windows software protection system.
Tags
-
Adds Run key to start application
Tags
TTPs
-
Checks whether UAC is enabled
Tags
TTPs
-
Suspicious use of SetThreadContext
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Privilege Escalation
Tasks