Overview

overview

10

Static

static

7

6365fba932...9f.exe

windows7-x64

10

6365fba932...9f.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    6365fba932d0e4a80c1300dd14bb3c9f

  • Size

    501KB

  • Sample

    240117-x3p8jadbbp

  • MD5

    6365fba932d0e4a80c1300dd14bb3c9f

  • SHA1

    8be1c71cf1a4663d1325e5bf605200c77064e052

  • SHA256

    51b6d18aefdaa4a9530bbb7e42261a12bc9a70f89689e040ac99e052e2d8b725

  • SHA512

    5318d333739ded372b6165cb8efdea81279852edd0ca008be72c7563bed2769ba698b59f5a359fd4ad03a357151464c5444d794889a307ab91250614d822c43e

  • SSDEEP

    12288:RASqlsLJNqaM3WIqbB4IZonspovb3FhBeDtwxkju/hR3f3vpEe1x:p4WNqhmbBHZgspybkD2xkyTvBbx

Score
10/10
evasionthemidatrojan

Malware Config

Targets

    • Target

      6365fba932d0e4a80c1300dd14bb3c9f

    • Size

      501KB

    • MD5

      6365fba932d0e4a80c1300dd14bb3c9f

    • SHA1

      8be1c71cf1a4663d1325e5bf605200c77064e052

    • SHA256

      51b6d18aefdaa4a9530bbb7e42261a12bc9a70f89689e040ac99e052e2d8b725

    • SHA512

      5318d333739ded372b6165cb8efdea81279852edd0ca008be72c7563bed2769ba698b59f5a359fd4ad03a357151464c5444d794889a307ab91250614d822c43e

    • SSDEEP

      12288:RASqlsLJNqaM3WIqbB4IZonspovb3FhBeDtwxkju/hR3f3vpEe1x:p4WNqhmbBHZgspybkD2xkyTvBbx

    Score
    10/10
    evasionthemidatrojan

    • UAC bypass

      evasiontrojan

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks