Overview

overview

9

Static

static

3

Client.exe

windows10-2004-x64

9

Client.exe

windows11-ltsc_2024-x64

7

Server.exe

windows10-2004-x64

7

Server.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    Vape.v4.04.zip
  • Size 56.2MB
  • Sample261027-wemxtseb82
  • SHA256 5c7bf06dfebdafb874aaf390f230e926277102f08dec3b2b876a411885750a61
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
defense_evasiondiscoveryexecutionprivilege_escalationpyinstaller

Malware Config

Targets

    • Target
      Client.exe
    • Size 15.5MB
    • SHA256 0a8aa182cda50a9be584926927a3a1432bac28b8f1972de764663977fb3f6194
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    defense_evasionprivilege_escalation

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      defense_evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

      defense_evasion
    behavioral1behavioral2
    • Target
      Server.exe
    • Size 66.9MB
    • SHA256 69ad944900232a07ad37dbb9a31ae7727c181d0c34ea65d6b54ad03676f420c9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasiondiscoveryexecutionprivilege_escalation

    • Loads dropped DLL

    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks