General

  • Target
    Fizzo Cracked.zip
  • Size 8.2MB
  • Sample260802-a3jz7abb28
  • SHA256 91ac4e8c0603c69ab2336747e13932f5116358844dbbbc709d99cba932464b86
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Fizzo Cracked.zip
    • Size 8.2MB
    • SHA256 91ac4e8c0603c69ab2336747e13932f5116358844dbbbc709d99cba932464b86
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      Fizzo Cracked.exe
    • Size 8.3MB
    • SHA256 ee8c85706a2cdff4f03a7a604f0e5cec3e003802ff2f296b763b51457c836388
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Checks whether UAC is enabled

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      SharpMonoInjector.dll
    • Size 22KB
    • SHA256 29217632db48464afb84f163f6d389af525edb7e951384ff5ea91d91c932ee96
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks