f6a534710e5d1c38bd96940a70662266f8be001628f27efc9edeaef16b69f588 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6a534710e5d1c38bd96940a70662266f8be001628f27efc9edeaef16b69f588
Size

814KB
Sample

221127-rxl12ahg5w
MD5

833b6aac2f565c237651858a572dba66
SHA1

68b3cd66b04a842128242f18c733bc42a5653b94
SHA256

f6a534710e5d1c38bd96940a70662266f8be001628f27efc9edeaef16b69f588
SHA512

0d10dcc9a2cec620a4639b0dcc5aa819de23a0253c1c6619b228bc27fe97416068829da5dab9d1adc5780dc6d2305d8576ba90fa88ef2c6b01bdca01499651b5
SSDEEP

12288:LYLPtbkFi6UGhvmB1XEjhxstHgRU5hXdn:EtbkslGhuBnHoaXF

Score

9^/10

evasion

Malware Config

Targets

- Target
  
  f6a534710e5d1c38bd96940a70662266f8be001628f27efc9edeaef16b69f588
- Size
  
  814KB
- MD5
  
  833b6aac2f565c237651858a572dba66
- SHA1
  
  68b3cd66b04a842128242f18c733bc42a5653b94
- SHA256
  
  f6a534710e5d1c38bd96940a70662266f8be001628f27efc9edeaef16b69f588
- SHA512
  
  0d10dcc9a2cec620a4639b0dcc5aa819de23a0253c1c6619b228bc27fe97416068829da5dab9d1adc5780dc6d2305d8576ba90fa88ef2c6b01bdca01499651b5
- SSDEEP
  
  12288:LYLPtbkFi6UGhvmB1XEjhxstHgRU5hXdn:EtbkslGhuBnHoaXF
Score

9^/10

evasion
- Checks for common network interception software
  Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
  evasion
- Enumerates VirtualBox registry keys
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Software Discovery

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2