General

  • Target
    HoAx (1).zip
  • Size 243.0MB
  • Sample260623-vg5pzset6m
  • SHA256 97b2c77f700aedeab47f308930716f283eae46067737ae2f80b788c806d0d060
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      HoAx/HoAx.exe
    • Size 246.7MB
    • SHA256 dd91e4e734ae4a80876f9292502eacaeb9f8b7f529223c6aeea7e14fd6e3e78f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      HoAx/VMProtectSDK64.dll
    • Size 115KB
    • SHA256 ec3235136a4daee2a6f72c0f2994a8365ca8427c8068d068130b74c9fa64cd02
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks