Overview

overview

7

Static

static

7

xernel-lau...91.exe

windows10-ltsc_2021-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    xernel-launcher-3406d9b49f91.exe
  • Size 19.8MB
  • Sample260625-nyt69abs91
  • SHA256 23ee9a2c9fd6aa1c34e3caf38fe10c1c0e0698ecf22a581d9736c5ea684517f8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryspywarethemidatrojanupx

Malware Config

Targets

    • Target
      xernel-launcher-3406d9b49f91.exe
    • Size 19.8MB
    • SHA256 23ee9a2c9fd6aa1c34e3caf38fe10c1c0e0698ecf22a581d9736c5ea684517f8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasiondiscoveryspywarethemidatrojanupx

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks