Resubmissions
02/09/2024, 06:41
240902-hfqs8avhjg 8General
-
Target
https://mega.nz/file/xxJGkRTA#ILEkqHMylFY-ilOAq9UoN8K4jnXgs_1njmGdcGjVwfE
-
Sample
240902-hfqs8avhjg
Score
8/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://mega.nz/file/xxJGkRTA#ILEkqHMylFY-ilOAq9UoN8K4jnXgs_1njmGdcGjVwfE
Resource
win10v2004-20240802-en
18 signatures
150 seconds
Malware Config
Targets
-
-
Target
https://mega.nz/file/xxJGkRTA#ILEkqHMylFY-ilOAq9UoN8K4jnXgs_1njmGdcGjVwfE
Score8/10-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1