983a7e328fcde84445f753d180f5be122662c083c76773da4c66236c6052a535 | Triage

Sharing

General

Target

983a7e328fcde84445f753d180f5be122662c083c76773da4c66236c6052a535
Size

814KB
Sample

221127-svnyaagf47
MD5

09c74ac0f5eaefc77114a2afb0e27a27
SHA1

3d547b5b9aa9c7b0661134ac7be35754acb6c05d
SHA256

983a7e328fcde84445f753d180f5be122662c083c76773da4c66236c6052a535
SHA512

04b8575e13da1587197531e8b6515895baf4d19549344bf11f3ab674bdf174f95ecb6baf18fc43896a2a7a87a7566bf5c1c3712674b5a4d1f7a0331e98ab8ab6
SSDEEP

12288:LYLWttbkFi6UGhvmB1XEjhxstHgRU5hXdn:FttbkslGhuBnHoaXF

Score

9^/10

evasion

Malware Config

Targets

- Target
  
  983a7e328fcde84445f753d180f5be122662c083c76773da4c66236c6052a535
- Size
  
  814KB
- MD5
  
  09c74ac0f5eaefc77114a2afb0e27a27
- SHA1
  
  3d547b5b9aa9c7b0661134ac7be35754acb6c05d
- SHA256
  
  983a7e328fcde84445f753d180f5be122662c083c76773da4c66236c6052a535
- SHA512
  
  04b8575e13da1587197531e8b6515895baf4d19549344bf11f3ab674bdf174f95ecb6baf18fc43896a2a7a87a7566bf5c1c3712674b5a4d1f7a0331e98ab8ab6
- SSDEEP
  
  12288:LYLWttbkFi6UGhvmB1XEjhxstHgRU5hXdn:FttbkslGhuBnHoaXF
Score

9^/10

evasion
- Checks for common network interception software
  Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
  evasion
- Enumerates VirtualBox registry keys
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Software Discovery

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2