Overview

overview

9

Static

static

7

Injector.exe

windows7-x64

9

Injector.exe

windows10-2004-x64

9

Resubmissions

21/09/2024, 20:12

240921-yy3tha1emn9

21/09/2024, 11:22

240921-ng2vrszdrn9

19/08/2024, 15:30

240819-sxmg8swanj9

09/08/2024, 09:18

240809-k9m1jayfrl

02/07/2024, 12:50

240702-p3d69ssgjd9

02/07/2024, 12:49

240702-p2f98ssfpa9

25/05/2024, 21:12

240525-z2dt8aba97

09/04/2024, 20:26

240409-y75dpahh689

09/04/2024, 06:53

240409-hnsb1sgh439

08/04/2024, 23:43

240408-3qqlesaf819

Sharing

Copy URL Twitter E-mail

General

  • Target
    Injector.exe
  • Size 3.4MB
  • Sample240702-p2f98ssfpa
  • SHA256 443b665c5f545a2bdd7855f86bf70a5ee7f35eda1b6b08615161f5809cbda02b
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10
evasionthemidatrojan

Malware Config

Targets

    • Target
      Injector.exe
    • Size 3.4MB
    • SHA256 443b665c5f545a2bdd7855f86bf70a5ee7f35eda1b6b08615161f5809cbda02b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks