Overview

overview

10

Static

static

10

NA_11cbb02...JC.dll

windows7-x64

9

NA_11cbb02...JC.dll

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NA_11cbb0233aff83d54e0d9189d_JC.dll

  • Size

    38KB

  • Sample

    230727-qtft6seg82

  • MD5

    9cd94c8ac5c05061bcd4edb8c1e7f8f4

  • SHA1

    d722c153c9ea0b627b09346f1e9e6deec4c3cbe0

  • SHA256

    11cbb0233aff83d54e0d9189d3a08d02a6bbb0ffa5c3b161df462780e0ee2d2d

  • SHA512

    9eea5545db4bd2c4f898f3ca733af839e710754a417615a926df95279db6b3803c230f0f083e5ac4248c4ed8e67e47f4c7fb5a08c5c042da5ecc2c291a363084

  • SSDEEP

    768:gGiEEBGU4Ly9RWFaoF4Vcps8etdvAgV1N:JiLBWLAWFad8eT4u1N

Score
10/10
pikabotevasion

Malware Config

Targets

    • Target

      NA_11cbb0233aff83d54e0d9189d_JC.dll

    • Size

      38KB

    • MD5

      9cd94c8ac5c05061bcd4edb8c1e7f8f4

    • SHA1

      d722c153c9ea0b627b09346f1e9e6deec4c3cbe0

    • SHA256

      11cbb0233aff83d54e0d9189d3a08d02a6bbb0ffa5c3b161df462780e0ee2d2d

    • SHA512

      9eea5545db4bd2c4f898f3ca733af839e710754a417615a926df95279db6b3803c230f0f083e5ac4248c4ed8e67e47f4c7fb5a08c5c042da5ecc2c291a363084

    • SSDEEP

      768:gGiEEBGU4Ly9RWFaoF4Vcps8etdvAgV1N:JiLBWLAWFad8eT4u1N

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Credential Access

Discovery

Query Registry

1
T1012

Virtualization/Sandbox Evasion

1
T1497

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks