Overview

overview

9

Static

static

7

0865bf46e7...91.exe

windows7-x64

9

0865bf46e7...91.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0865bf46e738d3a7261f2ceb2062b4954cdb776e01cac642797a4899388ea991

  • Size

    12.9MB

  • Sample

    240911-l2hxaatgmn

  • MD5

    c654577b8106ce14eb8c8030e63f4211

  • SHA1

    b07f1c34f6da6255a71569812bb14d3f33e6a647

  • SHA256

    0865bf46e738d3a7261f2ceb2062b4954cdb776e01cac642797a4899388ea991

  • SHA512

    9c5fde7e1fc33a65a573d235a2d182fef63f11320b632f498e6a0a5ce3eea797b8dbcfb6427822785f759a788b099b5ca21dd247519ae45b6037a510b3b592fb

  • SSDEEP

    393216:2g+i2FEIhcjMLB12oHRw+W9GXMUrNcfMlGp0:ZSEscwV12oxHHJrep0

Score
9/10
evasionthemidatrojan

Malware Config

Targets

    • Target

      0865bf46e738d3a7261f2ceb2062b4954cdb776e01cac642797a4899388ea991

    • Size

      12.9MB

    • MD5

      c654577b8106ce14eb8c8030e63f4211

    • SHA1

      b07f1c34f6da6255a71569812bb14d3f33e6a647

    • SHA256

      0865bf46e738d3a7261f2ceb2062b4954cdb776e01cac642797a4899388ea991

    • SHA512

      9c5fde7e1fc33a65a573d235a2d182fef63f11320b632f498e6a0a5ce3eea797b8dbcfb6427822785f759a788b099b5ca21dd247519ae45b6037a510b3b592fb

    • SSDEEP

      393216:2g+i2FEIhcjMLB12oHRw+W9GXMUrNcfMlGp0:ZSEscwV12oxHHJrep0

    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks