a226c496d3288f14f3a17fe4297bc97251d970f6813e4f68ba31b62a0be0cc69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a226c496d3288f14f3a17fe4297bc97251d970f6813e4f68ba31b62a0be0cc69
Size

797KB
Sample

221126-1q2ycagc47
MD5

fc106a133d944735dd3f5dd17c2ec946
SHA1

10c219c791e80f5d14514735679ef3c28a233fda
SHA256

a226c496d3288f14f3a17fe4297bc97251d970f6813e4f68ba31b62a0be0cc69
SHA512

6d9f7c6dda94dd93d7d9f0697db42d6b0706eda59bbd41c77ad6b151f2c0865364dc239aff8714727a70c6b43891f758d999f15c643dd35231144e3bafb94f3a
SSDEEP

12288:oXj0wfPcSE/DmTIVHWwVn8kLoiZEnO+tES29AG4B4cI6vLEzShGBKD:sXMDZoiAtESAeHTLFqk

Score

9^/10

evasion

Malware Config

Targets

- Target
  
  a226c496d3288f14f3a17fe4297bc97251d970f6813e4f68ba31b62a0be0cc69
- Size
  
  797KB
- MD5
  
  fc106a133d944735dd3f5dd17c2ec946
- SHA1
  
  10c219c791e80f5d14514735679ef3c28a233fda
- SHA256
  
  a226c496d3288f14f3a17fe4297bc97251d970f6813e4f68ba31b62a0be0cc69
- SHA512
  
  6d9f7c6dda94dd93d7d9f0697db42d6b0706eda59bbd41c77ad6b151f2c0865364dc239aff8714727a70c6b43891f758d999f15c643dd35231144e3bafb94f3a
- SSDEEP
  
  12288:oXj0wfPcSE/DmTIVHWwVn8kLoiZEnO+tES29AG4B4cI6vLEzShGBKD:sXMDZoiAtESAeHTLFqk
Score

9^/10

evasion
- Checks for common network interception software
  Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
  evasion
- Enumerates VirtualBox registry keys
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Software Discovery

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2