Overview

overview

9

Static

static

7

Utopia.exe

windows7-x64

9

Utopia.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Utopia.exe

  • Size

    5.1MB

  • Sample

    230313-n152jaac32

  • MD5

    95ffc79234c45b2824f878affdeb040e

  • SHA1

    152e6b1100a6283c1188842e5dcb28ce056e2b5d

  • SHA256

    7e30e982cc020c63d7eb8f4aa941304dcd5040be7afbb101af3ff47ea8e5d000

  • SHA512

    358638450538eebe05424724c40a8c170f0d30c246ebfadedda19143611aa0ac02ffea2265a18471cc0c67126949f3714f26034ae97562ef2f052b666905c8c7

  • SSDEEP

    98304:9l/RQy9tQeB2S9w2CknlwN1Iu0V4ZFnstsamp+ZGHSP1NA1vpNy6:P/VeS9ak+mu0VyiuaC+ZGHcNAHNy6

Score
9/10
evasionthemidatrojan

Malware Config

Targets

    • Target

      Utopia.exe

    • Size

      5.1MB

    • MD5

      95ffc79234c45b2824f878affdeb040e

    • SHA1

      152e6b1100a6283c1188842e5dcb28ce056e2b5d

    • SHA256

      7e30e982cc020c63d7eb8f4aa941304dcd5040be7afbb101af3ff47ea8e5d000

    • SHA512

      358638450538eebe05424724c40a8c170f0d30c246ebfadedda19143611aa0ac02ffea2265a18471cc0c67126949f3714f26034ae97562ef2f052b666905c8c7

    • SSDEEP

      98304:9l/RQy9tQeB2S9w2CknlwN1Iu0V4ZFnstsamp+ZGHSP1NA1vpNy6:P/VeS9ak+mu0VyiuaC+ZGHcNAHNy6

    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks