General
-
Target
0878ed523d5184a7ef0831213b1b1dca1a8ad3b7b998b46706e2bb94c8f782be
-
Size
615KB
-
Sample
221014-kzq97sgeam
-
MD5
4c49b0871f9b83d03cf067599b122e90
-
SHA1
4aa84436c760ba1d257f5965a95c3a5c7f294c74
-
SHA256
0878ed523d5184a7ef0831213b1b1dca1a8ad3b7b998b46706e2bb94c8f782be
-
SHA512
96836159d0cd982a6fc1257c4412f7a464d45299bc37126d7f702d4a470b9c140a2f9f3568675f8908efb53bff924a5fdf0a2f1ac5cfedc1829b6fae966d4070
-
SSDEEP
12288:1/XG9/i9kLEoJrAjZZliZGd/Ph6pu24S0RXIopWLqpaQ:5WgWEKAjRQGd/Pcpu9v13
Static task
static1
Behavioral task
behavioral1
Sample
0878ed523d5184a7ef0831213b1b1dca1a8ad3b7b998b46706e2bb94c8f782be.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0878ed523d5184a7ef0831213b1b1dca1a8ad3b7b998b46706e2bb94c8f782be.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
0878ed523d5184a7ef0831213b1b1dca1a8ad3b7b998b46706e2bb94c8f782be
-
Size
615KB
-
MD5
4c49b0871f9b83d03cf067599b122e90
-
SHA1
4aa84436c760ba1d257f5965a95c3a5c7f294c74
-
SHA256
0878ed523d5184a7ef0831213b1b1dca1a8ad3b7b998b46706e2bb94c8f782be
-
SHA512
96836159d0cd982a6fc1257c4412f7a464d45299bc37126d7f702d4a470b9c140a2f9f3568675f8908efb53bff924a5fdf0a2f1ac5cfedc1829b6fae966d4070
-
SSDEEP
12288:1/XG9/i9kLEoJrAjZZliZGd/Ph6pu24S0RXIopWLqpaQ:5WgWEKAjRQGd/Pcpu9v13
Score9/10-
Checks for common network interception software
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys
-
Adds Run key to start application
-