a568e2a4d89ab76ab9ff11b30bf320dcc4413353660678c51abc79863ff3c1c4

Resubmissions

04/05/2024, 23:24

240504-3dq2esab679

04/05/2024, 23:19

240504-3asqvaaa479

Sharing

Copy URL Twitter E-mail

General

Target
modest-menu.exe
Size 16.9MB
Sample240504-3dq2esab67
SHA256 a568e2a4d89ab76ab9ff11b30bf320dcc4413353660678c51abc79863ff3c1c4
MD5 ce03d8db32b901caba01fa8b1beefe54
SHA1 76377cea7317bd28af0ccaab276bd49360936a9d
SHA512 40ef98ee1dd411d3f634f9fe1ccdac0bc8fa5d13b1392ac5d045bf130db6efc5ebae48298d02a732fe634af953af10c004d54c3a4d5862b7f9cd6736f6ddbfca
SSDEEP 393216:YwOMvc42XGU57JO0OTOUbHvnqdLNZHgbATTT9:Yeh2Xb1Ra4LNibATv
MD5 SHA1 SHA512 SSDEEP

Score

9^/10

Malware Config

Targets

- Target
  modest-menu.exe
- Size 16.9MB
- SHA256 a568e2a4d89ab76ab9ff11b30bf320dcc4413353660678c51abc79863ff3c1c4
- MD5 ce03d8db32b901caba01fa8b1beefe54
- SHA1 76377cea7317bd28af0ccaab276bd49360936a9d
- SHA512 40ef98ee1dd411d3f634f9fe1ccdac0bc8fa5d13b1392ac5d045bf130db6efc5ebae48298d02a732fe634af953af10c004d54c3a4d5862b7f9cd6736f6ddbfca
- SSDEEP 393216:YwOMvc42XGU57JO0OTOUbHvnqdLNZHgbATTT9:Yeh2Xb1Ra4LNibATv
- MD5 SHA1 SHA512 SSDEEP
Score

9^/10

evasion themida trojan
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Themida packer
  Detects Themida, an advanced Windows software protection system.
  themida
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Identifies VirtualBox via ACPI registry values (likely anti-VM)

Checks BIOS information in registry

Themida packer

Checks whether UAC is enabled

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2