General

  • Target

    0878ed523d5184a7ef0831213b1b1dca1a8ad3b7b998b46706e2bb94c8f782be

  • Size

    615KB

  • Sample

    221014-kzq97sgeam

  • MD5

    4c49b0871f9b83d03cf067599b122e90

  • SHA1

    4aa84436c760ba1d257f5965a95c3a5c7f294c74

  • SHA256

    0878ed523d5184a7ef0831213b1b1dca1a8ad3b7b998b46706e2bb94c8f782be

  • SHA512

    96836159d0cd982a6fc1257c4412f7a464d45299bc37126d7f702d4a470b9c140a2f9f3568675f8908efb53bff924a5fdf0a2f1ac5cfedc1829b6fae966d4070

  • SSDEEP

    12288:1/XG9/i9kLEoJrAjZZliZGd/Ph6pu24S0RXIopWLqpaQ:5WgWEKAjRQGd/Pcpu9v13

Score
9/10

Malware Config

Targets

    • Target

      0878ed523d5184a7ef0831213b1b1dca1a8ad3b7b998b46706e2bb94c8f782be

    • Size

      615KB

    • MD5

      4c49b0871f9b83d03cf067599b122e90

    • SHA1

      4aa84436c760ba1d257f5965a95c3a5c7f294c74

    • SHA256

      0878ed523d5184a7ef0831213b1b1dca1a8ad3b7b998b46706e2bb94c8f782be

    • SHA512

      96836159d0cd982a6fc1257c4412f7a464d45299bc37126d7f702d4a470b9c140a2f9f3568675f8908efb53bff924a5fdf0a2f1ac5cfedc1829b6fae966d4070

    • SSDEEP

      12288:1/XG9/i9kLEoJrAjZZliZGd/Ph6pu24S0RXIopWLqpaQ:5WgWEKAjRQGd/Pcpu9v13

    Score
    9/10
    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

    • Enumerates VirtualBox registry keys

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks