General

  • Target

    EPM v14 Activator v1.1 - De!.exe

  • Size

    1.4MB

  • Sample

    230321-yascvscg49

  • MD5

    9bdff46961aef386d4de5e2b1405dc40

  • SHA1

    c6ef1ed87c331a8bd1cd1adaf5aa5d124d677bc3

  • SHA256

    d8e43dfb7662e0eeb26821f5a6a8d9f8a5b351d1d1e769a516ed65b86144e605

  • SHA512

    2651383f0fda8fe3c1ab7ea1335d1a0680b1bc52e33b4d66fab9fadf00f350e793392930c4a34838ec5fc98d1c92657a75170602b792158a88e3efcbc84feb8d

  • SSDEEP

    24576:llwhPNBDi2j1/m9+8N5n+Rj4YM7D4OnvHIHeev9Gvxa6uG2g1uv:laNE2Jdm57YMI6voHhKR/71uv

Score
6/10

Malware Config

Targets

    • Target

      EPM v14 Activator v1.1 - De!.exe

    • Size

      1.4MB

    • MD5

      9bdff46961aef386d4de5e2b1405dc40

    • SHA1

      c6ef1ed87c331a8bd1cd1adaf5aa5d124d677bc3

    • SHA256

      d8e43dfb7662e0eeb26821f5a6a8d9f8a5b351d1d1e769a516ed65b86144e605

    • SHA512

      2651383f0fda8fe3c1ab7ea1335d1a0680b1bc52e33b4d66fab9fadf00f350e793392930c4a34838ec5fc98d1c92657a75170602b792158a88e3efcbc84feb8d

    • SSDEEP

      24576:llwhPNBDi2j1/m9+8N5n+Rj4YM7D4OnvHIHeev9Gvxa6uG2g1uv:laNE2Jdm57YMI6voHhKR/71uv

    Score
    6/10
    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v6

Tasks