d79d6cda0fa8f71f92fd1d7dbc6ec2947b348ade38eddd26b5271cbbe81fcaef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d79d6cda0fa8f71f92fd1d7dbc6ec2947b348ade38eddd26b5271cbbe81fcaef_JC.exe
Size

2.4MB
Sample

231008-wl132afa2z
MD5

29d54d0b634f22751fa668f7a15fed93
SHA1

975579fb5a976bc09751790096ecef4ae023908b
SHA256

d79d6cda0fa8f71f92fd1d7dbc6ec2947b348ade38eddd26b5271cbbe81fcaef
SHA512

a8bd543ba32550688e0f226d830c8c611e2952346cf7ede416b9cd19bb998ea7bb41a2a8d0c921f938c3a5cec1700d3838f97d3e74aaca1b69a4aca6a66d20ff
SSDEEP

49152:XX4/sDfwweMoKGyaHwsI0YTfbfWEaWs3gcRYj4cxN:XDfhbGyaHJI0YT7paUcRm4cP

Score

9^/10

evasion trojan

Malware Config

Targets

- Target
  
  NEAS.d79d6cda0fa8f71f92fd1d7dbc6ec2947b348ade38eddd26b5271cbbe81fcaef_JC.exe
- Size
  
  2.4MB
- MD5
  
  29d54d0b634f22751fa668f7a15fed93
- SHA1
  
  975579fb5a976bc09751790096ecef4ae023908b
- SHA256
  
  d79d6cda0fa8f71f92fd1d7dbc6ec2947b348ade38eddd26b5271cbbe81fcaef
- SHA512
  
  a8bd543ba32550688e0f226d830c8c611e2952346cf7ede416b9cd19bb998ea7bb41a2a8d0c921f938c3a5cec1700d3838f97d3e74aaca1b69a4aca6a66d20ff
- SSDEEP
  
  49152:XX4/sDfwweMoKGyaHwsI0YTfbfWEaWs3gcRYj4cxN:XDfhbGyaHJI0YT7paUcRm4cP
Score

9^/10

evasion trojan
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2