Overview

overview

9

Static

static

7

NFA-ACCGEN_1.exe

windows10-1703-x64

9

NFA-ACCGEN_1.exe

windows10-2004-x64

9

Resubmissions

09/10/2023, 05:12

231009-fv3efsae7x 9

09/10/2023, 05:11

231009-ft86lsae7v 9

09/10/2023, 05:06

231009-frlmjaae6v 9

Sharing

Copy URL Twitter E-mail

General

  • Target

    NFA-ACCGEN_1.exe

  • Size

    6.0MB

  • Sample

    231009-ft86lsae7v

  • MD5

    a1839291640f441d940c3cf50bb20c30

  • SHA1

    9171e5d8348b21bc2efe968dfb30e155af9d7b9e

  • SHA256

    325d3cc28784f08b1500f990f9c7af60fade5c4d146e11a3f8ff4b23af86d623

  • SHA512

    69549db68d8cffed32312a6e6a3ec67a05eedf80f8edd878d7d120d81af2811586d3b61b3a3abd99e5d1f0ab9460e31c209696908007ec1c360e037fb558f3e5

  • SSDEEP

    98304:EByc/UskJ8LNDUhWsbLyYTbXRLa5qcKnPO8GEKL7ywAY3uh7S8v6AQn5IFMeJOTp:EBJNDIvLbXR+5/qmhL7ycY7Su6AQWOTn

Score
9/10
evasionthemidatrojan

Malware Config

Targets

    • Target

      NFA-ACCGEN_1.exe

    • Size

      6.0MB

    • MD5

      a1839291640f441d940c3cf50bb20c30

    • SHA1

      9171e5d8348b21bc2efe968dfb30e155af9d7b9e

    • SHA256

      325d3cc28784f08b1500f990f9c7af60fade5c4d146e11a3f8ff4b23af86d623

    • SHA512

      69549db68d8cffed32312a6e6a3ec67a05eedf80f8edd878d7d120d81af2811586d3b61b3a3abd99e5d1f0ab9460e31c209696908007ec1c360e037fb558f3e5

    • SSDEEP

      98304:EByc/UskJ8LNDUhWsbLyYTbXRLa5qcKnPO8GEKL7ywAY3uh7S8v6AQn5IFMeJOTp:EBJNDIvLbXR+5/qmhL7ycY7Su6AQWOTn

    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks