Analysis
-
max time kernel
140s -
max time network
117s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29/08/2024, 00:32
General
-
Target
CGHub/CGHub_Spoofer_And_Cleaner.exe
-
Size
5.0MB
-
MD5
1ca0eb31a80a01f3ffe2f4e34177e505
-
SHA1
b4641f7fbefff5c6f45bb2b45f193cce1ed6a5ff
-
SHA256
f09aac5ff089d99e27a31864e59acead12c727cd9eb6fecccfdb29f0bc0087e8
-
SHA512
b060bdea1f90548ee8d29d4c7d539672fe72e0563faf922c27b69f9f8d83b6f92596648c2c6c159986a1ee966807c68fe51760f7ced4ddbb6bb4bf1ef51566cb
-
SSDEEP
98304:uTBbh0Iz9kaOiSYwk7onmWW/Sb/zsd75parZ1HUMu+EjUw2HV:M0IzyzYR8nhbrsd758ZZUMH+UNHV
Score
9/10
Malware Config
Signatures
-
Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Themida packer 17 IoCs
Detects Themida, an advanced Windows software protection system.
-
Checks whether UAC is enabled 1 TTPs 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\CGHub\CGHub_Spoofer_And_Cleaner.exe"C:\Users\Admin\AppData\Local\Temp\CGHub\CGHub_Spoofer_And_Cleaner.exe"1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Checks whether UAC is enabled
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12.3MB
-
Filesize
8KB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
12.3MB
-
Filesize
12.3MB