7121d38f61f1e4286d610e76d80d7e19e92901ca43e824d2082e05f23bff5d78 | Triage

Sharing

General

Target

7121d38f61f1e4286d610e76d80d7e19e92901ca43e824d2082e05f23bff5d78
Size

828KB
Sample

221124-3ykp5sbg4y
MD5

d31e4f641d793184c8e39222f5e49938
SHA1

168e9ffe251852e7b9e9d08b70d47a4e2bf54c32
SHA256

7121d38f61f1e4286d610e76d80d7e19e92901ca43e824d2082e05f23bff5d78
SHA512

d82fddec2179a083202d7e2c7af563c726dec67df8f1396bdafa460811016ca59ddc35a569d5cc08995fd68cdff577577192841dd988715c4669fc5dd6fa6bfe
SSDEEP

12288:irH/1QU+HPwJFOKtRPkPBVf1wahDdjlwkEPkts+gge5k/mGbFPsjlmy0t:irfyyPPQyUJE8tslgj/RFP6my0t

Score

9^/10

evasion persistence

Malware Config

Targets

- Target
  
  7121d38f61f1e4286d610e76d80d7e19e92901ca43e824d2082e05f23bff5d78
- Size
  
  828KB
- MD5
  
  d31e4f641d793184c8e39222f5e49938
- SHA1
  
  168e9ffe251852e7b9e9d08b70d47a4e2bf54c32
- SHA256
  
  7121d38f61f1e4286d610e76d80d7e19e92901ca43e824d2082e05f23bff5d78
- SHA512
  
  d82fddec2179a083202d7e2c7af563c726dec67df8f1396bdafa460811016ca59ddc35a569d5cc08995fd68cdff577577192841dd988715c4669fc5dd6fa6bfe
- SSDEEP
  
  12288:irH/1QU+HPwJFOKtRPkPBVf1wahDdjlwkEPkts+gge5k/mGbFPsjlmy0t:irfyyPPQyUJE8tslgj/RFP6my0t
Score

9^/10

evasion persistence
- Checks for common network interception software
  Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
  evasion
- Enumerates VirtualBox registry keys
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Modify Registry

Credential Access

Discovery

Software Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2

evasionpersistence