General
-
Target
2df72da08922293def4cc27db4cb9ee611f691c85fb28788b2061a12da828f11
-
Size
515KB
-
Sample
221125-j1jq3scg86
-
MD5
bb04aab16873dc5b898ae0305621d1a2
-
SHA1
e6336334ff1f7530bb8c88e6894fa957d5e21f96
-
SHA256
2df72da08922293def4cc27db4cb9ee611f691c85fb28788b2061a12da828f11
-
SHA512
68046dd4df98e25ed6dfe3f9f9363c3edc81a5e438ad8005a29f49f64ed242b0fc4033522afc5640fb4482c58005605322fd0e3f22023763de331549c6db9f15
-
SSDEEP
12288:TdxYtVrDwXMNQB0O1zBnc3qp4t1Ntt9Ls/4SVjy:Tru8XTmOFp4bhlsby
Static task
static1
Behavioral task
behavioral1
Sample
2df72da08922293def4cc27db4cb9ee611f691c85fb28788b2061a12da828f11.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2df72da08922293def4cc27db4cb9ee611f691c85fb28788b2061a12da828f11.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
2df72da08922293def4cc27db4cb9ee611f691c85fb28788b2061a12da828f11
-
Size
515KB
-
MD5
bb04aab16873dc5b898ae0305621d1a2
-
SHA1
e6336334ff1f7530bb8c88e6894fa957d5e21f96
-
SHA256
2df72da08922293def4cc27db4cb9ee611f691c85fb28788b2061a12da828f11
-
SHA512
68046dd4df98e25ed6dfe3f9f9363c3edc81a5e438ad8005a29f49f64ed242b0fc4033522afc5640fb4482c58005605322fd0e3f22023763de331549c6db9f15
-
SSDEEP
12288:TdxYtVrDwXMNQB0O1zBnc3qp4t1Ntt9Ls/4SVjy:Tru8XTmOFp4bhlsby
Score9/10-
Checks for common network interception software
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys
-
Adds Run key to start application
-