Overview

overview

9

Static

static

b3747c4afa...09.exe

windows7-x64

9

b3747c4afa...09.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    b3747c4afa708ca6d8eaaf3dc33e6dbdf4d8fddf06020416da177762ab055109

  • Size

    1.0MB

  • Sample

    221125-3jmk7ahh2y

  • MD5

    14fb21852293e00252e6ced04fccac46

  • SHA1

    64659f4a96fda8a20c840f8fb51e782ca06ecd71

  • SHA256

    b3747c4afa708ca6d8eaaf3dc33e6dbdf4d8fddf06020416da177762ab055109

  • SHA512

    29b7f4ad9d0520eb3adadc61b6b7f1c85ca169cfe7e657fc13456a37950487e5472fcef4d046bf394dda65ae868ebee3ba8794c8fb3bf8e090cf816857ee65e6

  • SSDEEP

    12288:qgw6RUJr7lvLKhoM5l+AMFybmHEpv3J94aQ+q9QsuVI2S:qB6eJn/MCyyEpv3J94aQ+P7VO

Score
9/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      b3747c4afa708ca6d8eaaf3dc33e6dbdf4d8fddf06020416da177762ab055109

    • Size

      1.0MB

    • MD5

      14fb21852293e00252e6ced04fccac46

    • SHA1

      64659f4a96fda8a20c840f8fb51e782ca06ecd71

    • SHA256

      b3747c4afa708ca6d8eaaf3dc33e6dbdf4d8fddf06020416da177762ab055109

    • SHA512

      29b7f4ad9d0520eb3adadc61b6b7f1c85ca169cfe7e657fc13456a37950487e5472fcef4d046bf394dda65ae868ebee3ba8794c8fb3bf8e090cf816857ee65e6

    • SSDEEP

      12288:qgw6RUJr7lvLKhoM5l+AMFybmHEpv3J94aQ+q9QsuVI2S:qB6eJn/MCyyEpv3J94aQ+P7VO

    Score
    9/10
    discoveryevasionpersistence

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks