General

  • Target

    e688e311795948fea83635a792e30a8bd7847dda44b8ccb60d5528cc785bce60

  • Size

    464KB

  • Sample

    221123-s3k7csfh9w

  • MD5

    f87aa1d7556bfd43dbf7266c3937211f

  • SHA1

    be20b0fd84278c933fcf2f33ada57939de9ecaac

  • SHA256

    e688e311795948fea83635a792e30a8bd7847dda44b8ccb60d5528cc785bce60

  • SHA512

    303d2e43a490a8bcf52cac25b8fc241b3fae1f551343c4a00d441a2d6b1bb3bb2c11ae78901e48a2780561b3ba26fd4d05bde9e09c2c97c60c56884bb80feecd

  • SSDEEP

    6144:Bo9DtO+n0/z8GUlsFGsjy1r1ZMSbGXd+/RfFd34cNbuc4fcCyPWu++YgGFYOeN:cDo+2K5ZpUUfFdVCXPSRN

Malware Config

Targets

    • Target

      e688e311795948fea83635a792e30a8bd7847dda44b8ccb60d5528cc785bce60

    • Size

      464KB

    • MD5

      f87aa1d7556bfd43dbf7266c3937211f

    • SHA1

      be20b0fd84278c933fcf2f33ada57939de9ecaac

    • SHA256

      e688e311795948fea83635a792e30a8bd7847dda44b8ccb60d5528cc785bce60

    • SHA512

      303d2e43a490a8bcf52cac25b8fc241b3fae1f551343c4a00d441a2d6b1bb3bb2c11ae78901e48a2780561b3ba26fd4d05bde9e09c2c97c60c56884bb80feecd

    • SSDEEP

      6144:Bo9DtO+n0/z8GUlsFGsjy1r1ZMSbGXd+/RfFd34cNbuc4fcCyPWu++YgGFYOeN:cDo+2K5ZpUUfFdVCXPSRN

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

    • Enumerates VirtualBox registry keys

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks