Overview

overview

9

Static

static

3

Auth.exe

windows11-21h2-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Auth.exe

  • Size

    679KB

  • Sample

    240715-y1xehazdme

  • MD5

    568e3f3636b1d204055b73324e81f920

  • SHA1

    baae110653784e531833f5b4f6bae8817560624c

  • SHA256

    d8ff9e24dd89ea9c85ab5b27b15821e7d2012235420f4f12097654b61c98d808

  • SHA512

    adeff717ff93a28595654bc5466ab226ba29d90b08ac813b922a92309e2d985f30f570c0ba477eb112bf332df347c1a9b3dc74321358b1c309ed626c42307ac2

  • SSDEEP

    12288:Y9VQLZht6lHgaQkUu9UDVrPbVkUDv+i4pyrZ3TjT+vGHN4hC:i4hMHpQkx9SbqIP4pyrZ3TjT+vGt

Score
9/10
evasion

Malware Config

Targets

    • Target

      Auth.exe

    • Size

      679KB

    • MD5

      568e3f3636b1d204055b73324e81f920

    • SHA1

      baae110653784e531833f5b4f6bae8817560624c

    • SHA256

      d8ff9e24dd89ea9c85ab5b27b15821e7d2012235420f4f12097654b61c98d808

    • SHA512

      adeff717ff93a28595654bc5466ab226ba29d90b08ac813b922a92309e2d985f30f570c0ba477eb112bf332df347c1a9b3dc74321358b1c309ed626c42307ac2

    • SSDEEP

      12288:Y9VQLZht6lHgaQkUu9UDVrPbVkUDv+i4pyrZ3TjT+vGHN4hC:i4hMHpQkx9SbqIP4pyrZ3TjT+vGt

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks