Overview

overview

10

Static

static

10

1295844918...4f.exe

windows7-x64

9

1295844918...4f.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    129584491808171fee3c9c4875cbb4a39d9e5d273e9e0d46c1cb08cccf51d44f

  • Size

    1.7MB

  • Sample

    240626-d7n2gsvhrk

  • MD5

    036dc3218b5f8cb3aeacb67575b98001

  • SHA1

    23af359867202db45b8d70134d5e2b751c46d334

  • SHA256

    129584491808171fee3c9c4875cbb4a39d9e5d273e9e0d46c1cb08cccf51d44f

  • SHA512

    25f0889fc4649011b715b6286a8f9cb7c2f4e6f69be686d97efc77f7d1fa8a3f33f8c37687d0ad57aa33c5f892ec97812843a74c764e14d2ef9c697c993688a8

  • SSDEEP

    24576:Oe05gDmt2ZNIPjOsLwZPk6XF7gGeRdGT0AfZ2eolxldU3gp8wRdtko+Q7Hn3Pl+Q:OlgKEZNIPtLwu0bThfolxldWg7

Score
10/10
ploutusevasion

Malware Config

Targets

    • Target

      129584491808171fee3c9c4875cbb4a39d9e5d273e9e0d46c1cb08cccf51d44f

    • Size

      1.7MB

    • MD5

      036dc3218b5f8cb3aeacb67575b98001

    • SHA1

      23af359867202db45b8d70134d5e2b751c46d334

    • SHA256

      129584491808171fee3c9c4875cbb4a39d9e5d273e9e0d46c1cb08cccf51d44f

    • SHA512

      25f0889fc4649011b715b6286a8f9cb7c2f4e6f69be686d97efc77f7d1fa8a3f33f8c37687d0ad57aa33c5f892ec97812843a74c764e14d2ef9c697c993688a8

    • SSDEEP

      24576:Oe05gDmt2ZNIPjOsLwZPk6XF7gGeRdGT0AfZ2eolxldU3gp8wRdtko+Q7Hn3Pl+Q:OlgKEZNIPtLwu0bThfolxldWg7

    Score
    9/10
    evasion

    • Looks for VirtualBox Guest Additions in registry

      evasion

    • Looks for VMWare Tools registry key

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2
T1497

Credential Access

Discovery

Query Registry

4
T1012

Virtualization/Sandbox Evasion

2
T1497

System Information Discovery

2
T1082

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks