Overview

overview

9

Static

static

7

3ed6d2f681...51.exe

windows7-x64

9

3ed6d2f681...51.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ed6d2f68121710f36a6e0cadc9b1951

  • Size

    2.8MB

  • Sample

    240103-z3dwlsafgl

  • MD5

    3ed6d2f68121710f36a6e0cadc9b1951

  • SHA1

    e67b5a804d53ae7f2f548295b8d9a67bcccdaebb

  • SHA256

    5226083f9a9a93b01b1cbf1e906d96a5619c7a7d2ba529cfd87dd1024e53978e

  • SHA512

    7ab87ce1559a2b02f1bb53d7cdc26aab117610bd6ddbdabaa0e244bdc8c73e6b27b0224ea7d8566c18638b787715b011fcb952b1eedc6d54762b1690d3252ad6

  • SSDEEP

    49152:R282R9yv42c+pjXyXm1sqeoOyDlttkfPODGxjFI7nuAVQMlHoRFQyeqYl6ykwMC0:R282zqGyColttkfPjftAVQIHoRheqYlC

Score
9/10
evasionthemidatrojan

Malware Config

Targets

    • Target

      3ed6d2f68121710f36a6e0cadc9b1951

    • Size

      2.8MB

    • MD5

      3ed6d2f68121710f36a6e0cadc9b1951

    • SHA1

      e67b5a804d53ae7f2f548295b8d9a67bcccdaebb

    • SHA256

      5226083f9a9a93b01b1cbf1e906d96a5619c7a7d2ba529cfd87dd1024e53978e

    • SHA512

      7ab87ce1559a2b02f1bb53d7cdc26aab117610bd6ddbdabaa0e244bdc8c73e6b27b0224ea7d8566c18638b787715b011fcb952b1eedc6d54762b1690d3252ad6

    • SSDEEP

      49152:R282R9yv42c+pjXyXm1sqeoOyDlttkfPODGxjFI7nuAVQMlHoRFQyeqYl6ykwMC0:R282zqGyColttkfPjftAVQIHoRheqYlC

    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks