95dea59c9833cb81c4690d6f644fcbfcbfd9dda3209aaa1fee62c25d010cf1a8

Resubmissions

18/07/2022, 00:53

220718-a8q1pagch79

17/07/2022, 22:19

220717-18p2haggbk9

Sharing

Copy URL Twitter E-mail

General

Target
95dea59c9833cb81c4690d6f644fcbfcbfd9dda3209aaa1fee62c25d010cf1a8
Size 1.3MB
Sample220718-a8q1pagch7
SHA256 95dea59c9833cb81c4690d6f644fcbfcbfd9dda3209aaa1fee62c25d010cf1a8
MD5 85c8e01f5ec046ed1922b048749a96dd
SHA1 b7d67f0f50dcfd52bf0244b27d2e32f4b37e1d3b
SHA512 fdedb6ddb37aba27ff01232aea3a6d9c662f7941d344e172ee51af3d53ca6ed7f1438b6d43d446fedf2f94e2064cfbeaa04b9ecae018dc2c5c55e6424e19449e
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Targets

- Target
  95dea59c9833cb81c4690d6f644fcbfcbfd9dda3209aaa1fee62c25d010cf1a8
- Size 1.3MB
- SHA256 95dea59c9833cb81c4690d6f644fcbfcbfd9dda3209aaa1fee62c25d010cf1a8
- MD5 85c8e01f5ec046ed1922b048749a96dd
- SHA1 b7d67f0f50dcfd52bf0244b27d2e32f4b37e1d3b
- SHA512 fdedb6ddb37aba27ff01232aea3a6d9c662f7941d344e172ee51af3d53ca6ed7f1438b6d43d446fedf2f94e2064cfbeaa04b9ecae018dc2c5c55e6424e19449e
- MD5 SHA1 SHA512
Score

9^/10

evasion persistence themida trojan
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Themida packer
  Detects Themida, an advanced Windows software protection system.
  themida
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Identifies VirtualBox via ACPI registry values (likely anti-VM)

Checks BIOS information in registry

Themida packer

Adds Run key to start application

Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2