Overview

overview

9

Static

static

7

launcher (1).exe

windows10-1703-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    launcher (1).exe

  • Size

    12.3MB

  • Sample

    220922-trdtksffdp

  • MD5

    1f2b01f1b19f99014203783908b60e90

  • SHA1

    ffa1cd057c490976007f84e5f408d6d242449b30

  • SHA256

    9cf8699c3b57588c8073d861e0e608c4447683225bd6dae7c63288e94d36f5dc

  • SHA512

    09d0e9dcea66e24863017690a58e36c7b258bd145c3e405e6531b6798a60808e74c5ef3c9c8f9ea113218f53661e3a2b7720a0c77d8d64986afc9570bfc7f517

  • SSDEEP

    98304:1zaYWTelH/kP5YK+SGBv1F+qz3ZJ9xr9+rqNqpTPiX7tZ2mz7mb:1zaYWTAYb+Fv19zJbj+rqNyPgv1g

Score
9/10
evasionthemidatrojan

Malware Config

Targets

    • Target

      launcher (1).exe

    • Size

      12.3MB

    • MD5

      1f2b01f1b19f99014203783908b60e90

    • SHA1

      ffa1cd057c490976007f84e5f408d6d242449b30

    • SHA256

      9cf8699c3b57588c8073d861e0e608c4447683225bd6dae7c63288e94d36f5dc

    • SHA512

      09d0e9dcea66e24863017690a58e36c7b258bd145c3e405e6531b6798a60808e74c5ef3c9c8f9ea113218f53661e3a2b7720a0c77d8d64986afc9570bfc7f517

    • SSDEEP

      98304:1zaYWTelH/kP5YK+SGBv1F+qz3ZJ9xr9+rqNqpTPiX7tZ2mz7mb:1zaYWTAYb+Fv19zJbj+rqNyPgv1g

    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks