f1d5e99465d30a49df0df1855fc8982c893829b895d767120abab24f2642c58e | Triage

Sharing

General

Target

f1d5e99465d30a49df0df1855fc8982c893829b895d767120abab24f2642c58e
Size

760KB
Sample

221001-1xpatsafcm
MD5

65feaf516852831a2e0cd62930e4d890
SHA1

93ee37e6d04c6c1dc34cf24b8101bae904d07d2d
SHA256

f1d5e99465d30a49df0df1855fc8982c893829b895d767120abab24f2642c58e
SHA512

74ea6edfb414f79e249ef023e6a0d7b775747390ca1042b9f3e0bcecccfa4a7802f20f14c5ee188db2b3d61c452cc033cb9fc284ab0f29aa2693dd8b653a76cf
SSDEEP

6144:/aKFVip6wM4AfNrUq76cLdAfgfb3TlwFEoSpWaK+lIZNVh42xrYGIWT:6MwMx2qKgjDlc6p1viDBd

Score

9^/10

discovery evasion

Malware Config

Targets

- Target
  
  f1d5e99465d30a49df0df1855fc8982c893829b895d767120abab24f2642c58e
- Size
  
  760KB
- MD5
  
  65feaf516852831a2e0cd62930e4d890
- SHA1
  
  93ee37e6d04c6c1dc34cf24b8101bae904d07d2d
- SHA256
  
  f1d5e99465d30a49df0df1855fc8982c893829b895d767120abab24f2642c58e
- SHA512
  
  74ea6edfb414f79e249ef023e6a0d7b775747390ca1042b9f3e0bcecccfa4a7802f20f14c5ee188db2b3d61c452cc033cb9fc284ab0f29aa2693dd8b653a76cf
- SSDEEP
  
  6144:/aKFVip6wM4AfNrUq76cLdAfgfb3TlwFEoSpWaK+lIZNVh42xrYGIWT:6MwMx2qKgjDlc6p1viDBd
Score

9^/10

discovery evasion
- Checks for common network interception software
  Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
  evasion
- Enumerates VirtualBox registry keys
  evasion
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Software Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion