General

  • Target
    MuMuInstaller-A6-2022-may_1.4.2.2_gw-offline-x64_all_1652703751.exe
  • Size 768.2MB
  • Sample260720-1af1yagy7x
  • SHA256 e91fda1e02fd9cb9b2a27acaf4c381e7c99bc6baed3a139482d25a7b208f22e4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      MuMuInstaller-A6-2022-may_1.4.2.2_gw-offline-x64_all_1652703751.exe
    • Size 768.2MB
    • SHA256 e91fda1e02fd9cb9b2a27acaf4c381e7c99bc6baed3a139482d25a7b208f22e4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

MITRE ATT&CK Enterprise v16

Tasks