Overview

overview

9

Static

static

7

ac9018feca...5b.dll

windows7-x64

9

ac9018feca...5b.dll

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac9018feca227a5f513a5954e9274374f07ec87551e594242c9edf2f9e7f025b

  • Size

    3.0MB

  • Sample

    231112-t944gsgh4z

  • MD5

    ee741e1b1ead93370428691e3e1ec18d

  • SHA1

    d81159d926b2f5592912208f4de14e2fbfefaa77

  • SHA256

    ac9018feca227a5f513a5954e9274374f07ec87551e594242c9edf2f9e7f025b

  • SHA512

    9be5db9caf9408537c2dd64d15ba9e6b02df11a0359309962c3f86407b516c18252ceb51b3d31f613013987f4f348cba7dbe4f687c598ca0e202fd645b7afd5e

  • SSDEEP

    49152:CUrAJ1BqAOnNWsEq3011NdhwCoRXmehA9oMBCfLaJ3Ym9Aamk3vvcLLb:CSmOnNCTE9B/DaJIJVk3vkLn

Score
9/10
evasionthemidatrojan

Malware Config

Targets

    • Target

      ac9018feca227a5f513a5954e9274374f07ec87551e594242c9edf2f9e7f025b

    • Size

      3.0MB

    • MD5

      ee741e1b1ead93370428691e3e1ec18d

    • SHA1

      d81159d926b2f5592912208f4de14e2fbfefaa77

    • SHA256

      ac9018feca227a5f513a5954e9274374f07ec87551e594242c9edf2f9e7f025b

    • SHA512

      9be5db9caf9408537c2dd64d15ba9e6b02df11a0359309962c3f86407b516c18252ceb51b3d31f613013987f4f348cba7dbe4f687c598ca0e202fd645b7afd5e

    • SSDEEP

      49152:CUrAJ1BqAOnNWsEq3011NdhwCoRXmehA9oMBCfLaJ3Ym9Aamk3vvcLLb:CSmOnNCTE9B/DaJIJVk3vkLn

    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks