Overview

overview

9

Static

static

a986080df6...39.exe

windows7-x64

9

a986080df6...39.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a986080df6b0ed5207929988919e836801695f46a61a1201eba3104acaa43639

  • Size

    559KB

  • Sample

    221123-qp2abahe5y

  • MD5

    c8b4b643837c8d1909b3529a0c707000

  • SHA1

    f92e9db338fd9e821a9789f43a3f0aa75a345526

  • SHA256

    a986080df6b0ed5207929988919e836801695f46a61a1201eba3104acaa43639

  • SHA512

    551a6de8152b0e5059e4f8cabb31ccb810f7c856ee7f00c59a303a33df82f1c925eccb922d613c6468cb1268570e8d69aa3ec7ac442dd3d031e1955951afb24f

  • SSDEEP

    12288:sR5D/3//jPX0BGsLFS7d1SStHGkc980p82ehSL4dW:EzHjSxCd1SStHA86ehSL4d

Score
9/10
evasionpersistence

Malware Config

Targets

    • Target

      a986080df6b0ed5207929988919e836801695f46a61a1201eba3104acaa43639

    • Size

      559KB

    • MD5

      c8b4b643837c8d1909b3529a0c707000

    • SHA1

      f92e9db338fd9e821a9789f43a3f0aa75a345526

    • SHA256

      a986080df6b0ed5207929988919e836801695f46a61a1201eba3104acaa43639

    • SHA512

      551a6de8152b0e5059e4f8cabb31ccb810f7c856ee7f00c59a303a33df82f1c925eccb922d613c6468cb1268570e8d69aa3ec7ac442dd3d031e1955951afb24f

    • SSDEEP

      12288:sR5D/3//jPX0BGsLFS7d1SStHGkc980p82ehSL4dW:EzHjSxCd1SStHA86ehSL4d

    Score
    9/10
    evasionpersistence

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks