Overview

overview

9

Static

static

3480a52d91...ea.exe

windows7-x64

9

3480a52d91...ea.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3480a52d919694be25d27078ba41f84c14b26cfe1d7726b9118b48f50f8887ea

  • Size

    710KB

  • Sample

    221123-rzdgnsch2x

  • MD5

    ff7323d7f1b97560537a6c8b59134691

  • SHA1

    5dd98ec9d692fcd526778058a75a78e4b34f7256

  • SHA256

    3480a52d919694be25d27078ba41f84c14b26cfe1d7726b9118b48f50f8887ea

  • SHA512

    2796b1883565b487162f613bfd83d0e97ce05ee0218742e6ade6e38c288cbe9131bfd6d933f176a2adae40a8deee2b9bed9458bab7bf6aef5e262a2d48ca9e3e

  • SSDEEP

    12288:bopfsNd0jbsZ+Uou1jejoUViYMnyz73cxOXLy+u5RLrCeIMCdwOUOH0jn:s1sNd0jg+jcjejdKWjb85RXCejRO+

Score
9/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      3480a52d919694be25d27078ba41f84c14b26cfe1d7726b9118b48f50f8887ea

    • Size

      710KB

    • MD5

      ff7323d7f1b97560537a6c8b59134691

    • SHA1

      5dd98ec9d692fcd526778058a75a78e4b34f7256

    • SHA256

      3480a52d919694be25d27078ba41f84c14b26cfe1d7726b9118b48f50f8887ea

    • SHA512

      2796b1883565b487162f613bfd83d0e97ce05ee0218742e6ade6e38c288cbe9131bfd6d933f176a2adae40a8deee2b9bed9458bab7bf6aef5e262a2d48ca9e3e

    • SSDEEP

      12288:bopfsNd0jbsZ+Uou1jejoUViYMnyz73cxOXLy+u5RLrCeIMCdwOUOH0jn:s1sNd0jg+jcjejdKWjb85RXCejRO+

    Score
    9/10
    discoveryevasionpersistence

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks