General

  • Target

    Akira_NEWEST.exe

  • Size

    5.1MB

  • Sample

    230326-hselqafg55

  • MD5

    47feab24e4a7a088fcac9a7067cbf318

  • SHA1

    bbe0dcbe7eb3d0fa19b4afb5edff51b7066ec45d

  • SHA256

    53285fb142e48bd1a568509c8997067370ac4578b3c92d8c3bc75ecdebc2915f

  • SHA512

    6b3b0e289d06839cfd32327dfa1795368601a789c3dc2a0db9f0cce01001a28a584d5c26ce4e46e9002626a1f3ba318e038578e86f00cff489956aace8b419aa

  • SSDEEP

    98304:KxNeg5VPsVXSfJHbM+A+PoudLZ1uRhkuoxa4kReiX2+jli:TgTZhHbFddNZ1kroxacUbBi

Malware Config

Targets

    • Target

      Akira_NEWEST.exe

    • Size

      5.1MB

    • MD5

      47feab24e4a7a088fcac9a7067cbf318

    • SHA1

      bbe0dcbe7eb3d0fa19b4afb5edff51b7066ec45d

    • SHA256

      53285fb142e48bd1a568509c8997067370ac4578b3c92d8c3bc75ecdebc2915f

    • SHA512

      6b3b0e289d06839cfd32327dfa1795368601a789c3dc2a0db9f0cce01001a28a584d5c26ce4e46e9002626a1f3ba318e038578e86f00cff489956aace8b419aa

    • SSDEEP

      98304:KxNeg5VPsVXSfJHbM+A+PoudLZ1uRhkuoxa4kReiX2+jli:TgTZhHbFddNZ1kroxacUbBi

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Checks whether UAC is enabled

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Discovery

Query Registry

2
T1012

Virtualization/Sandbox Evasion

1
T1497

System Information Discovery

2
T1082

Tasks