Overview

overview

9

Static

static

7

MHPT v7 Injector.exe

windows7-x64

9

MHPT v7 Injector.exe

windows10-2004-x64

9

MHPT v7.dll

windows7-x64

1

MHPT v7.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    b7e5c0c9e1a93e8c74c2e677afc67899
  • Size 904KB
  • Sample240306-vcx5cach37
  • SHA256 f271c8f134130fbfe0655f50ebf35d421d0dde39371d8f89816e736e447f5689
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10
aspackv2evasion

Malware Config

Targets

    • Target
      MHPT v7 Injector.exe
    • Size 982KB
    • SHA256 17e33d0df88ff540b77c81b73947a9dc311abedd625df1ed5816212cba47a19d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2
    • Target
      MHPT v7.dll
    • Size 7KB
    • SHA256 1a8e59105734c4f157b07c16b4f3cf08e1c5a83554b5e76ed7257544a4aec2a4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks