Overview

overview

9

Static

static

04725e8e41...0c.exe

windows7-x64

9

04725e8e41...0c.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04725e8e41aca5b4d9a88679d76c988e301a60bfdc7ac267add50d5fc98db40c

  • Size

    1016KB

  • Sample

    221107-s54rgsgebk

  • MD5

    01bb9fdc5647fce6086d8cfcfa295390

  • SHA1

    5f8df44624dc0333df1f6e1efc2f8e2040503981

  • SHA256

    04725e8e41aca5b4d9a88679d76c988e301a60bfdc7ac267add50d5fc98db40c

  • SHA512

    394d2018f08ce16f00e31caa754b5486edb55734d609f6dd4d8094af7d2da58be8a1e3118dbb4b3aaee5dd913c02b4f9f878aa544289fbe163b08ea1407dc8f5

  • SSDEEP

    12288:feIulb1dg6NmaqNbdoC4iyjyLqudRyG0Y9wDL5Bt2HqZT0YPPQ7z:mIuTuYDq58U6EwDFQYP4

Score
9/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      04725e8e41aca5b4d9a88679d76c988e301a60bfdc7ac267add50d5fc98db40c

    • Size

      1016KB

    • MD5

      01bb9fdc5647fce6086d8cfcfa295390

    • SHA1

      5f8df44624dc0333df1f6e1efc2f8e2040503981

    • SHA256

      04725e8e41aca5b4d9a88679d76c988e301a60bfdc7ac267add50d5fc98db40c

    • SHA512

      394d2018f08ce16f00e31caa754b5486edb55734d609f6dd4d8094af7d2da58be8a1e3118dbb4b3aaee5dd913c02b4f9f878aa544289fbe163b08ea1407dc8f5

    • SSDEEP

      12288:feIulb1dg6NmaqNbdoC4iyjyLqudRyG0Y9wDL5Bt2HqZT0YPPQ7z:mIuTuYDq58U6EwDFQYP4

    Score
    9/10
    discoveryevasionpersistence

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks