a70a76483d53f44fb3a36fce6f2538e303d7b5c26d04d1b4843a085876ee9c5d | Triage

Sharing

General

Target

a70a76483d53f44fb3a36fce6f2538e303d7b5c26d04d1b4843a085876ee9c5d
Size

2.5MB
Sample

240410-qf6tfagh53
MD5

9daf7745f6c9cb18ad84f52361d80284
SHA1

c6b061b0a4d725357d5753c48dda8f272c0cf2ae
SHA256

a70a76483d53f44fb3a36fce6f2538e303d7b5c26d04d1b4843a085876ee9c5d
SHA512

a74673ae62d925d7d25adb26206c8dbd0cf28bfdbb3a2a504d65d0c13132a5b39036639bdfa388291c38471770aa793428b7e14d418d3bf886e9e53587b4ded6
SSDEEP

49152:zW8pCYTBjCf1YfXVU999LgWb+GEzI7KotFV1+5SA9qNfOhIudvAR33BOoU+CDdQF:zW76BjSCFon+GEc4Y2hIAmBYJS

Score

9^/10

evasion trojan

Malware Config

Targets

- Target
  
  a70a76483d53f44fb3a36fce6f2538e303d7b5c26d04d1b4843a085876ee9c5d
- Size
  
  2.5MB
- MD5
  
  9daf7745f6c9cb18ad84f52361d80284
- SHA1
  
  c6b061b0a4d725357d5753c48dda8f272c0cf2ae
- SHA256
  
  a70a76483d53f44fb3a36fce6f2538e303d7b5c26d04d1b4843a085876ee9c5d
- SHA512
  
  a74673ae62d925d7d25adb26206c8dbd0cf28bfdbb3a2a504d65d0c13132a5b39036639bdfa388291c38471770aa793428b7e14d418d3bf886e9e53587b4ded6
- SSDEEP
  
  49152:zW8pCYTBjCf1YfXVU999LgWb+GEzI7KotFV1+5SA9qNfOhIudvAR33BOoU+CDdQF:zW76BjSCFon+GEc4Y2hIAmBYJS
Score

9^/10

evasion trojan
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2