Analysis
-
max time kernel
135s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
23-02-2024 01:23
General
-
Target
adwq/Proyecto Semestral.exe
-
Size
10.6MB
-
MD5
50faefd96a3884a0bd06b4c67d53629f
-
SHA1
c4445a81135f380d2316b4eee2350b537cbcc364
-
SHA256
cfa8e745a7570804047bc0b20accc699960fb77dfa659e9031355088ffb00c33
-
SHA512
0ac25c158ccd0914d0fe115c032eb514e0a789debbb0b6691514df43cfb8d3485b4171cef4ed0710627ae5683c704684d3011981eeff5ebb2625140c00b62b5f
-
SSDEEP
196608:6RQz0r8ovtaMDiekfc92f6NvRXACKit/YJPw71p/8:6s0r8o1aMWPfbiSwj/8
Score
9/10
Malware Config
Signatures
-
Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled 1 TTPs 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\adwq\Proyecto Semestral.exe"C:\Users\Admin\AppData\Local\Temp\adwq\Proyecto Semestral.exe"1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Checks whether UAC is enabled
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
-
Filesize
19.5MB
-
Filesize
19.5MB
-
Filesize
19.5MB
-
Filesize
19.5MB
-
Filesize
19.5MB
-
Filesize
1.7MB
-
Filesize
1.7MB