9386d2f27c23a56a79136160bab8816ba06621f7989282dd76dd21c522ed56a4 | Triage

Sharing

General

Target

9386d2f27c23a56a79136160bab8816ba06621f7989282dd76dd21c522ed56a4
Size

605KB
Sample

221123-qxmf5afa95
MD5

ebb2db11b89e1f66d182c16a93198502
SHA1

5df83d16341d472cbbc34d40ed95546bd7a13b26
SHA256

9386d2f27c23a56a79136160bab8816ba06621f7989282dd76dd21c522ed56a4
SHA512

e7840c54b42a93232676bfc9fbe888cf12aa5d70258d4dd1f58811de50f6659f4dfe0b51d8263b4564b2e0685d2c979e65891ff95cb30919e3d753c30578aec2
SSDEEP

12288:dDFbpji+06AZfioD+ekdRTCzoDlxp7J1qvYhuYt1AR4Ep555555555555555555D:d9REfiomdRW+3FJkYB1455555555555B

Score

9^/10

discovery evasion

Malware Config

Targets

- Target
  
  9386d2f27c23a56a79136160bab8816ba06621f7989282dd76dd21c522ed56a4
- Size
  
  605KB
- MD5
  
  ebb2db11b89e1f66d182c16a93198502
- SHA1
  
  5df83d16341d472cbbc34d40ed95546bd7a13b26
- SHA256
  
  9386d2f27c23a56a79136160bab8816ba06621f7989282dd76dd21c522ed56a4
- SHA512
  
  e7840c54b42a93232676bfc9fbe888cf12aa5d70258d4dd1f58811de50f6659f4dfe0b51d8263b4564b2e0685d2c979e65891ff95cb30919e3d753c30578aec2
- SSDEEP
  
  12288:dDFbpji+06AZfioD+ekdRTCzoDlxp7J1qvYhuYt1AR4Ep555555555555555555D:d9REfiomdRW+3FJkYB1455555555555B
Score

9^/10

discovery evasion
- Checks for common network interception software
  Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
  evasion
- Enumerates VirtualBox registry keys
  evasion
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Software Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2