Overview

overview

7

Static

static

7

Trojan.Hoo...a0.exe

windows7-x64

7

Trojan.Hoo...a0.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Trojan.Hooker.ATA_virussign.com_da11f107a87f4871a607a4725b7027a0.exe

  • Size

    5.2MB

  • Sample

    240907-p1mqmawgpf

  • MD5

    da11f107a87f4871a607a4725b7027a0

  • SHA1

    3ba2d419f4d76bbff171a0411e7da41b1d806045

  • SHA256

    dbab7928123dc1d7dfb8eacf29c00a980592f259ff1622081fe1e052302a417f

  • SHA512

    d930520658e4669453dd8e6ba3ac67a1e17098f4bf7e5df62fce0218001ccdd482e6dd446a7a52401c443863ceaa4aa14fb84d61bbac9a282750f80ccba84523

  • SSDEEP

    98304:FxUE9IgtuB++frket7f2b1Z5Y72XalEnJ+SesJ/rO75kEpQcIGXyU:FO9gtuSet7exY72bnJpJrq18U

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      Trojan.Hooker.ATA_virussign.com_da11f107a87f4871a607a4725b7027a0.exe

    • Size

      5.2MB

    • MD5

      da11f107a87f4871a607a4725b7027a0

    • SHA1

      3ba2d419f4d76bbff171a0411e7da41b1d806045

    • SHA256

      dbab7928123dc1d7dfb8eacf29c00a980592f259ff1622081fe1e052302a417f

    • SHA512

      d930520658e4669453dd8e6ba3ac67a1e17098f4bf7e5df62fce0218001ccdd482e6dd446a7a52401c443863ceaa4aa14fb84d61bbac9a282750f80ccba84523

    • SSDEEP

      98304:FxUE9IgtuB++frket7f2b1Z5Y72XalEnJ+SesJ/rO75kEpQcIGXyU:FO9gtuSet7exY72bnJpJrq18U

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks