9559430e4dec2b40add575c99c2bcdb30b043f1d771fa853848cdfd2006365dd

General

Target
9559430e4dec2b40add575c99c2bcdb30b043f1d771fa853848cdfd2006365dd
Size 13.8MB
Sample240524-dp2vmaba8s
SHA256 9559430e4dec2b40add575c99c2bcdb30b043f1d771fa853848cdfd2006365dd
MD5 d67dbe3b2cac9db5164840e082feb83d
SHA1 b7cbf827fda9c89408cb18208b7e4dd4f21b9ecc
SHA512 ef44a20477349eecf5ce4230d148f2465ebcaf3ed07fbe09cb0d4e4b765676b4923cfa5534203cbd6994641a6575acf8621c23009000c211bd9d49d439a6470f
SSDEEP 393216:OgyS9XPqZgEjlKQImvk+n4SrRglGWJFGQhXjY:D14T9vASFgHrX
MD5 SHA1 SHA512 SSDEEP

Score

9^/10

Malware Config

Targets

- Target
  9559430e4dec2b40add575c99c2bcdb30b043f1d771fa853848cdfd2006365dd
- Size 13.8MB
- SHA256 9559430e4dec2b40add575c99c2bcdb30b043f1d771fa853848cdfd2006365dd
- MD5 d67dbe3b2cac9db5164840e082feb83d
- SHA1 b7cbf827fda9c89408cb18208b7e4dd4f21b9ecc
- SHA512 ef44a20477349eecf5ce4230d148f2465ebcaf3ed07fbe09cb0d4e4b765676b4923cfa5534203cbd6994641a6575acf8621c23009000c211bd9d49d439a6470f
- SSDEEP 393216:OgyS9XPqZgEjlKQImvk+n4SrRglGWJFGQhXjY:D14T9vASFgHrX
- MD5 SHA1 SHA512 SSDEEP
Score

9^/10

evasion oss_ak themida trojan upx
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  evasion
- detect oss ak
  oss ak information detected.
  oss_ak
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Themida packer
  Detects Themida, an advanced Windows software protection system.
  themida
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

1

T1497

Credential Access

Discovery

Query Registry

2

T1012

System Information Discovery

2

T1082

Virtualization/Sandbox Evasion

1

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Identifies VirtualBox via ACPI registry values (likely anti-VM)

detect oss ak

Checks BIOS information in registry

Loads dropped DLL

Themida packer

UPX packed file

Checks whether UAC is enabled

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2