7b7375dbd8fc6089d9c74f15b97126582e50625b2790ece0707c15837de22574

Sharing

Copy URL

Twitter E-mail

General

Target

purify.zip
Size

15.7MB
Sample

240712-vqm7asvcrg
MD5

5abce42f3417d21eded9f7c7e02242d1
SHA1

3b781bd5357f44f715a72676895600a1b6a9d7dd
SHA256

7b7375dbd8fc6089d9c74f15b97126582e50625b2790ece0707c15837de22574
SHA512

93695a22c9ac7d37f1011bbac1792b4cdb8cf0c6fda73962a8354ad53fc1b1e3caff97a40abc61037e050d8e4471d6b82a6becdde316ea5696cb94a36891c20f
SSDEEP

393216:zUM9Wo6LXidEwTVKIUD2cd85IjDvCvP/K9Q:z9ltdEZNA5IjLOPh

Score

9^/10

Malware Config

Targets

- Target
  
  purify.zip
- Size
  
  15.7MB
- MD5
  
  5abce42f3417d21eded9f7c7e02242d1
- SHA1
  
  3b781bd5357f44f715a72676895600a1b6a9d7dd
- SHA256
  
  7b7375dbd8fc6089d9c74f15b97126582e50625b2790ece0707c15837de22574
- SHA512
  
  93695a22c9ac7d37f1011bbac1792b4cdb8cf0c6fda73962a8354ad53fc1b1e3caff97a40abc61037e050d8e4471d6b82a6becdde316ea5696cb94a36891c20f
- SSDEEP
  
  393216:zUM9Wo6LXidEwTVKIUD2cd85IjDvCvP/K9Q:z9ltdEZNA5IjLOPh
Score

1^/10
behavioral1
- Target
  
  bin/Ace/ace/theme-monokai.js
- Size
  
  2KB
- MD5
  
  7d316f91d4f266648be72b5eae8c0903
- SHA1
  
  aa874437292ad563b62539dfc207b42863b59ed8
- SHA256
  
  fc751b1f902fdd3ec661074577291046b01a49b77d46401cf9b5129a6a68e383
- SHA512
  
  b532a952ad478a8e23152310648d1e7249f4637113e0f24c29a2f7ae41983fd57493ad333aa2da0d69c3e8e36a7107cbdce99b8841b78fc029d874c752712df8
Score

3^/10

execution
behavioral2
- Target
  
  bin/Ace/ace/theme-nord_dark.js
- Size
  
  2KB
- MD5
  
  0e3b50426e5072895d181f43055a0e12
- SHA1
  
  8e6079f51e5d975ef7cb79124a1ed11dee1eaa57
- SHA256
  
  d730081d08734bc3f0b3bad5d5ff097fe2ceb5b24dfd7173e23c0db9c117ce11
- SHA512
  
  3b0fe926dd72485c0f6874141e4fbf2ed439f2a7608e4598773b9c1bbd48d91fff1a722e678dab422d00335775b75a1be8b2df88dedc382fb7047a0fd731bb7e
Score

3^/10

execution
behavioral3
- Target
  
  bin/Ace/ace/theme-pastel_on_dark.js
- Size
  
  3KB
- MD5
  
  19bb990e56a953fbe3431b87fecf334f
- SHA1
  
  1d9801f0eb2040253cf52e8874d71550c7c42a21
- SHA256
  
  2cafcd68fc15f43a4fe296cae7dc8ee9fef5a300950955f427d0b3d5c7c31ceb
- SHA512
  
  8c123f32a4547b3eff824ca85aa2dd019584ffc93ae8048b56c1c2919bd7d589e42e76fb39985ee513085b701bf00b2601a22516be5471b63d94a193fa83b144
Score

3^/10

execution
behavioral4
- Target
  
  bin/Ace/ace/theme-solarized_dark.js
- Size
  
  2KB
- MD5
  
  d52d38352d0a907c4401316cf903ee78
- SHA1
  
  67f97a891e7218526f2b74f121e34a97e0205fac
- SHA256
  
  f3972f746f16ca1951780d370283c4573c35d787af2cec0fed3ac8307fe82ed5
- SHA512
  
  3108231b755e01af4983f0238a979a6c26173d55330acdea6cb35183952c3bf6972700d964bafe7eb3ae3f3c3c4944a0082bdbc2b618faa153e41ad956d060d6
Score

3^/10

execution
behavioral5
- Target
  
  bin/Ace/ace/theme-solarized_light.js
- Size
  
  2KB
- MD5
  
  6a6401137026b335b01c113f3d060c6f
- SHA1
  
  5fcf30f735220b57b6559b5e1ec1cd8df731b8e6
- SHA256
  
  16228d912e7c7d4f8999929c7941b21cf0bbefbb1a14e78401ad52f6b6af083a
- SHA512
  
  d211becfc22fc9c97c830986948f12e9abc660fe8e74b93326a80c734813d0bc9f932024cc4a4630a2d518a1237a3e79b3973a59c113a97efd46e0954ea8cab1
Score

3^/10

execution
behavioral6
- Target
  
  bin/Ace/ace/theme-sqlserver.js
- Size
  
  3KB
- MD5
  
  24e73e7829af6b8fc1d0d71ecd131657
- SHA1
  
  c26ee1d6e7406d1301e87a7a8db928abd76cdbf1
- SHA256
  
  70e2f2894eedf2549b73e2ed11a098d2f4b22c90d9520387d5b154e59160b07c
- SHA512
  
  32aa6aeb4eae990c996a300097624794de1ec6d89ca8ad4281a5ff7d00fe29cc4d7d2a94d62a4416416bcf11664656c6b2119a3d0b65606f9b824de2d9862541
Score

3^/10

execution
behavioral7
- Target
  
  bin/Ace/ace/theme-terminal.js
- Size
  
  3KB
- MD5
  
  96d7c426653a71c9b3f43c3f5b9105fa
- SHA1
  
  3baac31b7eae72c8a6ea017df9b230d8fd3b29fa
- SHA256
  
  69047d1458c2f6714ad0bcda9a9b64badb489815ed8e69660c4276dbd72071ed
- SHA512
  
  37d677d62eb9752f144bd2f2399d0928fe0f35d18b701fd5486a26a2104d7207a30c2e85b56719f0e8cb75a3bb387e82897745c32d6cd0f1131195436cd40d74
Score

3^/10

execution
behavioral8
- Target
  
  bin/Ace/ace/theme-textmate.js
- Size
  
  3KB
- MD5
  
  2f686e483548f32f0d3779a76c8d6ff4
- SHA1
  
  610ec732f7cc5161f0d3a044bb58f1b7e738778f
- SHA256
  
  98bc05999a4090b91b472261211384056119c4382557391e6b0d3aaeed229220
- SHA512
  
  bfaa83cff1cc80c5528f9a90ee4f2bf8dee77b28e3cae1f34e3aee7ddbe6bc599e24fded58bb0388ccf441bb277b78777866f56c9bd04a1d4399c1937611a73e
Score

3^/10

execution
behavioral9
- Target
  
  bin/Ace/ace/theme-tomorrow.js
- Size
  
  3KB
- MD5
  
  f26d1ffa93250d0e93656ea3596ea08c
- SHA1
  
  9122dba6dc439e49db39296253af4795e39628e3
- SHA256
  
  c54eca05938a4a8ccd6f135189d9f056dcb9368ec7c4b2c3f34b61e18c7ba4d1
- SHA512
  
  cec8e496d7a4a9ddd669bc12f6f4794c933896da041041ffc6b9cbdc1d01ea025c3ce0feaa03a7076532f85fb5ac0946efa6d606b07a3c4ff7ece6fa78701a87
Score

3^/10

execution
behavioral10
- Target
  
  bin/Ace/ace/theme-tomorrow_night.js
- Size
  
  3KB
- MD5
  
  f4d2a50ae3d58379763615551cf3cdd5
- SHA1
  
  ce1616f674e8aae5a307d48ec35decb2a6de782a
- SHA256
  
  6ec93a456d89cf2e3450b56afa1a8fb2447b91de6ebe631c1aad4d0dc90ea028
- SHA512
  
  c5747c7fdeab704702845034fa03e031bb06b7139db4f4c39bd0b6f87c3d44ec658a28864d0275c5b93eb4a5c3adbe522ae500d75809d8416946aa0fd4f2562e
Score

3^/10

execution
behavioral11
- Target
  
  bin/Ace/ace/theme-tomorrow_night_blue.js
- Size
  
  3KB
- MD5
  
  0c737d8c053ba96098687322f975449f
- SHA1
  
  288b6d58dbe971ea50c408f2026be6664b6a5acd
- SHA256
  
  f8aad06af44f6c3a6c48d6214ae1479777682674f772056a9218e4924dc24bf5
- SHA512
  
  98fae2ac3ff8adf6792510ae67e41e32f9ea4c6f84c0df882bb191def0ccce90e2a1c21dc2cd617841ed4328afdbd813ea21805a5f1ada6cd7244cacdc7d6104
Score

3^/10

execution
behavioral12
- Target
  
  bin/Ace/ace/theme-tomorrow_night_bright.js
- Size
  
  4KB
- MD5
  
  b6b5a95a526c8c686129e8df41133a0b
- SHA1
  
  4a428c76a85e7cea377e06fa3991d2072ffa1a37
- SHA256
  
  93bc36d7d2e7227e4adec36c75289428100832dbaff37e4923306413bc10d1fa
- SHA512
  
  570cc069bae77e084433103f52832d16cd3322d22453283eba2b5e30f6c02c5a63c841fbb9f4b23069ab0fc72ffed909e08a3db5c193e32586df53d68cbf1243
- SSDEEP
  
  96:Z5yFw0WCPS15vaVgmb7nsgtEWHjKWyTCa:ZGBiUpnrjKWyTCa
Score

3^/10

execution
behavioral13
- Target
  
  bin/Ace/ace/theme-tomorrow_night_eighties.js
- Size
  
  3KB
- MD5
  
  7938e1cd59f23f5852116591c9334147
- SHA1
  
  b059a6dfe48d8272db6a9efe66e21c8f51ae8962
- SHA256
  
  686303b80fed77cc3cbe59600b84f9502428f8c89a92257391cb16dde69f38de
- SHA512
  
  199365090780b4196a6a1a291582c6d4bffb74de8402ceb18f5fe305636d32f4e7591a203e826a8d6b81c3c88384ba5fe5ba481134f123643b18c8b43653880a
Score

3^/10

execution
behavioral14
- Target
  
  bin/Ace/ace/theme-twilight.js
- Size
  
  3KB
- MD5
  
  81ef3620097282c8bf6c60f8b801112b
- SHA1
  
  9c250b57de74609a16188260862bf6ea4b8007f5
- SHA256
  
  34ac51b17727bf17bc449c79c14b8297a63799ba97c78f0af3554d2de450f372
- SHA512
  
  c8d1bbc3eb93995e32a2fb24369acce31542954090cd298eb99d4de8e7799d323bc58944dd9b41223e9c2f6c22e2bdf3c9dc9031dc792ec2e16eb59ce620c495
Score

3^/10

execution
behavioral15
- Target
  
  bin/Ace/ace/theme-vibrant_ink.js
- Size
  
  2KB
- MD5
  
  988a557a3c5dcbc4dd1fd4cd7233142b
- SHA1
  
  9490bc9de38629aa02b99f96daa8008454ec366f
- SHA256
  
  fa6c95efc1c6a4e587e1cb889973737464b267200b764f4685af593d61f2920c
- SHA512
  
  3054feae11d7132c1be101109e58f6290ce19dff6d657a1d5af57d765f4589e2b58daf7ac30cfe4e55ae4399b3168936568b4234dd8c5c5e2cdf02cbcc6aadb9
Score

3^/10

execution
behavioral16
- Target
  
  bin/Ace/ace/theme-xcode.js
- Size
  
  2KB
- MD5
  
  0ce578fa2382cd868e54669c8f76226c
- SHA1
  
  67a6e0e9ed95c29482821a7b5d564d13f2f2463c
- SHA256
  
  4b76afd215da31f34fb8da43657ef840322759ea361cffb8867c8c9922e0d09a
- SHA512
  
  8bbd7e34876f8a498e94029301a09479ff4135afcfd41cbb7c14abc5e5a8db7c3bda4b9294609217c19d2eda92ccb21f8d04c3e9d0635d3d97b29c645b0f9540
Score

3^/10

execution
behavioral17
- Target
  
  bin/Ace/ace/worker-base.js
- Size
  
  41KB
- MD5
  
  6a9936d9aac8022397daaf6ecfb8ce69
- SHA1
  
  7c96f658902583641bed0fdb2872943114cdaa1f
- SHA256
  
  8662cf2e0565b433e308c3beea18986eb5bb6fa53d4e0f49c16c3f393f968b06
- SHA512
  
  982ae04c55c7b3b518c857d64f98b12b7d4bed8bc598aada0cea88974cf5882503c356002b47d22f1f5b8e851c902dd0c248d5f45ddcf648d2c5c24f1a7754ac
- SSDEEP
  
  768:ixr83i2XEZsrQXDLN7pdpI1G1T5W2VHDk:PnrWAGc
Score

3^/10

execution
behavioral18
- Target
  
  bin/Ace/ace/worker-coffee.js
- Size
  
  340KB
- MD5
  
  91c4b607b2b7736395a2be29a55019fb
- SHA1
  
  cd6c04093d04dcb60e5cd1e03da7f9a64db3f771
- SHA256
  
  3e29029c29dc390233ac2f174bc1d04f434ea84e3588165e247eead61b0a0321
- SHA512
  
  a425b52a9d6bd0645c9bcd3f50e67ce993357b05c60cb821a74c76bbd105ef326c76ff4ea0d15534647d4d25fee36ca8dacae96abeb046538c5281d3f8054032
- SSDEEP
  
  6144:uL+W+4gnHMxrOZi71go/kUL9Cj4xm38u5grS2FeRm8vt87QBWjnfDpQUl1MMkkmg:k+4gnHMhOZi71go/kUL9Cj4xm38u5grj
Score

3^/10

execution
behavioral19
- Target
  
  bin/Ace/ace/worker-css.js
- Size
  
  269KB
- MD5
  
  efb7f98bfc7e9c92c7a5eacd72ece9e6
- SHA1
  
  0b6c2de65deb556163893762146c88e7451a3945
- SHA256
  
  53468a5a21fda1bdc6838d73255f0f0b3d7030c745077d09d4cdc41b20796f5a
- SHA512
  
  2ca94b561e2d13ea7f91ea3087c2c4a19ae3862b48ebfcd934f9f3c95eae3e49f8d6cdd69d8254a88985e3c57ffc3935581ad615dc8fb473720cc64dce9e50cf
- SSDEEP
  
  3072:P0WWf5ItfOgvN5N6zXXnN0NevSlEHopW7tRIzAeGCRrLMBrfF8McDG:cWWf5c754nKEHopW7tRIzAerLMcS
Score

3^/10

execution
behavioral20
- Target
  
  bin/Ace/ace/worker-html.js
- Size
  
  308KB
- MD5
  
  9386d958640fc0a47447bdfca55f8bf5
- SHA1
  
  12037ab805f96b5ce9f577ef0506c1b67a890532
- SHA256
  
  ea26ed95d6a1d2680f3ab1d96c60855e7a757a887415f4a9cce510def5d75db0
- SHA512
  
  0f177551a1557211a81d634af0b6f04b7fce2cb21547126e0b62f7f71037be0a394c902323451eedcecc0a64b9d723296946587bf1847fc60fb59351f1c82673
- SSDEEP
  
  3072:PtYz2vyoH+aMqjThP8YAEOkoWyF9a5CV+OuD6P/HLqdSWtgq7IsUETR:yz2vyoH+aMqXezHLy/75UI
Score

3^/10

execution
behavioral21
- Target
  
  bin/Ace/ace/worker-javascript.js
- Size
  
  704KB
- MD5
  
  3cf7b1d2ea8347d735826d1b16cb9fd4
- SHA1
  
  9871a44aeb58298ac1329747bd0067b287e5d901
- SHA256
  
  4be16facbe6e2d6dead2d0e4129849a8ab98a3bf8ab03faba629a174a815ce6a
- SHA512
  
  96a648b2c2f75864f2308b0e4087c6fc04aa399fdbd48e44b9507a905796f442a4e870635d72608f2fb64766cda8a64000881151a0578e88c4c69b517f1fbcb3
- SSDEEP
  
  3072:P+e5r4xCeM2DfKTsBLnxbVrbqMAJ6RdsSq8L5c9FcqvcI3ndqETfpCQd+J:Hr4xCtfTsBzxlbVED9hndqkpCQd+J
Score

3^/10

execution
behavioral22
- Target
  
  bin/Ace/ace/worker-json.js
- Size
  
  49KB
- MD5
  
  f166bb62fecf6c0e350f17dca47c1b4b
- SHA1
  
  0677b278f097e3b08207ba630ad4f22aae76bc62
- SHA256
  
  750cdbc2fca92018a2bcb5bf5c5f4769150ae8f03ff57b9756977162bb365fe4
- SHA512
  
  27fd7fa07f0eeb5aa821b8dd2a8fa740c05df0535ca47141e70389fc9abe70bc6a4e7fccc2c36e0f90f6562d729248dd5cfa48588dca888db0acced112f36bc8
- SSDEEP
  
  768:ixr83i2XEZSrmXDLN7pdpI1G1T5W2VHDu+WPw:PlrIAGG+z
Score

3^/10

execution
behavioral23
- Target
  
  bin/Ace/ace/worker-lua.js
- Size
  
  103KB
- MD5
  
  3d9869484364b1f4de82257c972a87df
- SHA1
  
  da0f80379cc786ae9aead6a1defc34a3c4dd330e
- SHA256
  
  f521157ec70229a0e5a0ed7d350f8d36b7abd8e6bacf94f6f83d1fece424e555
- SHA512
  
  6f246c684171e3e10152a402972081a52f9d71597f6a6b2cce92044e370870f06a1efb88460811142df6d1a39f52fe3968bd9a10833da5d7a67d64ad91c85c3c
- SSDEEP
  
  1536:PIr6FGjrtnjnh0tAKLYN0Yn1wy21HnPmyay5lNhWsvh:PSrtnbhIAKLYN0Yn1wy21HnPmyay5lNb
Score

3^/10

execution
behavioral24
- Target
  
  bin/Ace/ace/worker-php.js
- Size
  
  129KB
- MD5
  
  252f17e9eb1657bc463d30b59714c5a7
- SHA1
  
  694751478a81ee36445f6b4e06bb1e2be04130a6
- SHA256
  
  dc63a37b79c60d6d7ccfe64dcd382c85a6e5aad2fd892160edc269ade901eb0c
- SHA512
  
  2cde0dd6d8c81452dfc7953a3bbc823f864f381aeacf66bd10bf6942363d440a7e036602b43d0b1d169e6d8cd9be4d27426bf19e38ccbc341928dad3d9303caf
- SSDEEP
  
  1536:PlrIAGxV2XzMwE4ej4elY4Reualc06Apfyc332MHomQ+ooooolllllp:PXXzz5rel9Rsv68oooo2
Score

3^/10

execution
behavioral25
- Target
  
  bin/Ace/ace/worker-xml.js
- Size
  
  88KB
- MD5
  
  90b145d08b88b0cc186c2ab7c016a56b
- SHA1
  
  3633102e9e8c771b50c6f87eabf8a10e50f04605
- SHA256
  
  8c9849c4e32cab5a80daea0879c6fe8318a78fed000b72b302989a669cec99fb
- SHA512
  
  64608f16dd2188be9c52ef70c836564f22cc2e767a002c96aab705824e446ccfd28970525b3feb43de4f29e2b5ea4722ec6b46e79383bd4f8ba2b7eac4f85d13
- SSDEEP
  
  1536:PlrIGJF4mjiCNLlHn1pcCNkIEV8Et3V5R:PrLlHvcKjwl5R
Score

3^/10

execution
behavioral26
- Target
  
  bin/Ace/ace/worker-xquery.js
- Size
  
  3.3MB
- MD5
  
  7bd8338ff17f155c4c5ce74384927080
- SHA1
  
  fb6e8301218816ba65e8ad036a76c68dd521dbb4
- SHA256
  
  c823a1d13da1cc479a2c6ce5ab5cad8a24fd73023f21069a39ac203d7df33daf
- SHA512
  
  a08f337820af458936f9d58e23b1f04def731d996739d37a27a1c7d275ff0f4af703343e88312966a161c22eb1228d125afe43368a46ed370f9b5e6815c38986
- SSDEEP
  
  24576:n1yQnAaK3rxmSfUIjM2RMQBaRpjkcmAd5rWwkCK:/kCK
Score

3^/10

execution
behavioral27
- Target
  
  bin/last_data.json
- Size
  
  2B
- MD5
  
  99914b932bd37a50b983c5e7c90ae93b
- SHA1
  
  bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA256
  
  44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- SHA512
  
  27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
Score

3^/10
behavioral28
- Target
  
  flint.dll
- Size
  
  4.0MB
- MD5
  
  2a0e4a3c4f1f38f9d6b9be820cc781c7
- SHA1
  
  c8973021c55d7d673b1cee051e509fcb9f09e083
- SHA256
  
  a46649a1827ecca60e439c4a26a6f288fb332c2c3f0f4a613530273fbf53a9ff
- SHA512
  
  91cf729f04f575192e1bedaba63cb8222b1a0a201ee72b794b4faf5ce9589455c4096cdac113323e5d85993374a9e04f952a19e8c1bca5f0feee3208cd4b3f7c
- SSDEEP
  
  98304:k5ae36yod9PKIq7DfeL5RWG0SGZxNLtB10sGAK9:Be36yodEI+W5RWaGdpBm19
Score

9^/10

evasion themida trojan
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Themida packer
  Detects Themida, an advanced Windows software protection system.
  themida
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral29
- Target
  
  main.exe
- Size
  
  8.6MB
- MD5
  
  75c773432e8687e11cbef1c57d0f51da
- SHA1
  
  c773ab179485ea2d470a1b8fa9b7e2c551c2652c
- SHA256
  
  9c4d909ca35d48d6267328c191a18cfcc16156a9a9e274023bbc91970e4b78a1
- SHA512
  
  a4b55473fa8516f6fffb2a1b9c648ff1344c55d836446f670d80b14bc3fb8df304b9c46bca9c73ee1813c5c35b8db04513f4ec5333955b83df571f6b0a5d1778
- SSDEEP
  
  196608:Tpk/EOlXEGH1qvuVj5EmqxWdMe7cb5nNARzQY:V6lXEGHcvuVdErIdMdbjU
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral30
- Target
  
  runtimes/win-x64/native/WebView2Loader.dll
- Size
  
  161KB
- MD5
  
  c5f0c46e91f354c58ecec864614157d7
- SHA1
  
  cb6f85c0b716b4fc3810deb3eb9053beb07e803c
- SHA256
  
  465a7ddfb3a0da4c3965daf2ad6ac7548513f42329b58aebc337311c10ea0a6f
- SHA512
  
  287756078aa08130907bd8601b957e9e006cef9f5c6765df25cfaa64ddd0fff7d92ffa11f10a00a4028687f3220efda8c64008dbcf205bedae5da296e3896e91
- SSDEEP
  
  3072:7evoTTlTRTyiuPThTNTKm81SbbMYSPLNsknZiZ2HZ5AaliiT88FEtJ57dXSvlCW:HTlTRTyiuPThTNTKmFQdhsknZiMHfEti
Score

1^/10
behavioral31
- Target
  
  scripts/test.lua
- Size
  
  32B
- MD5
  
  4bb440c2a792f148305fac83ab586591
- SHA1
  
  27f01085e2ddbad8aceb73dfc0bf81371dbcc356
- SHA256
  
  bc09d9f7203f05b5a5af3465cee017ca400d158977862f447582b26839558ee6
- SHA512
  
  f43cdf869ee7ec2bd1688f88890696b1274c97e3bc876444a8691227e2658108684cb0031fa4432c539392eb629d4d054ee33645a00d22e06d9e680914490f60
Score

3^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Identifies VirtualBox via ACPI registry values (likely anti-VM)

Checks BIOS information in registry

Themida packer

Checks whether UAC is enabled

Suspicious use of NtSetInformationThreadHideFromDebugger

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32