Overview

overview

9

Static

static

a6cfa4195c...4a.exe

windows7-x64

9

a6cfa4195c...4a.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6cfa4195cb1aebeb23b2ce976d67ccc4bc1f17c16ad2a98ce4aeccf6e4db44a

  • Size

    744KB

  • Sample

    221003-q7frbsaaa2

  • MD5

    6852dc040d2982dc3d84d35b99aa27d0

  • SHA1

    3c02a9903ed822b849ee8167e7f3c54cdd4dcab4

  • SHA256

    a6cfa4195cb1aebeb23b2ce976d67ccc4bc1f17c16ad2a98ce4aeccf6e4db44a

  • SHA512

    596bb88cd21219bf6777cac58b05864cfc58c51215e0a363122af5a07da74b05f8e59c1b59d17ece46702696c9a71d9ead334f315ccbf2eae2a0af1c034ad34f

  • SSDEEP

    12288:s0z039PcjiGTKdZEWeqttztIc7mzkUZsdxfZ5Aj:c39PcS7EiJj7QkU+d7

Score
9/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      a6cfa4195cb1aebeb23b2ce976d67ccc4bc1f17c16ad2a98ce4aeccf6e4db44a

    • Size

      744KB

    • MD5

      6852dc040d2982dc3d84d35b99aa27d0

    • SHA1

      3c02a9903ed822b849ee8167e7f3c54cdd4dcab4

    • SHA256

      a6cfa4195cb1aebeb23b2ce976d67ccc4bc1f17c16ad2a98ce4aeccf6e4db44a

    • SHA512

      596bb88cd21219bf6777cac58b05864cfc58c51215e0a363122af5a07da74b05f8e59c1b59d17ece46702696c9a71d9ead334f315ccbf2eae2a0af1c034ad34f

    • SSDEEP

      12288:s0z039PcjiGTKdZEWeqttztIc7mzkUZsdxfZ5Aj:c39PcS7EiJj7QkU+d7

    Score
    9/10
    discoveryevasionpersistence

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks