04ff7bc8578aa59e96c97553f24f4b003b0ac4d589293306a3eccf3a478a472f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04ff7bc8578aa59e96c97553f24f4b003b0ac4d589293306a3eccf3a478a472f
Size

2.9MB
Sample

221127-v6jh2seh87
MD5

2605375fb143c6138929a6c0c5805ae9
SHA1

0dc707c8c6442d1d941aa0e1330a4a642c31fe96
SHA256

04ff7bc8578aa59e96c97553f24f4b003b0ac4d589293306a3eccf3a478a472f
SHA512

9f9a443c4af1b6644ff31689159433c10b46417e409cb2c803033e91420fc9ee3030e9de2dda473ffc326974809c2bc943958694794f2d1620580ae5e1f97c6a
SSDEEP

24576:YQ7wfI6yo+ygOV7ZeS0MAyWLRmTo+0PF3aVPj:GIRqVQrNtLYs+0PlaR

Score

9^/10

evasion

Malware Config

Targets

- Target
  
  04ff7bc8578aa59e96c97553f24f4b003b0ac4d589293306a3eccf3a478a472f
- Size
  
  2.9MB
- MD5
  
  2605375fb143c6138929a6c0c5805ae9
- SHA1
  
  0dc707c8c6442d1d941aa0e1330a4a642c31fe96
- SHA256
  
  04ff7bc8578aa59e96c97553f24f4b003b0ac4d589293306a3eccf3a478a472f
- SHA512
  
  9f9a443c4af1b6644ff31689159433c10b46417e409cb2c803033e91420fc9ee3030e9de2dda473ffc326974809c2bc943958694794f2d1620580ae5e1f97c6a
- SSDEEP
  
  24576:YQ7wfI6yo+ygOV7ZeS0MAyWLRmTo+0PF3aVPj:GIRqVQrNtLYs+0PlaR
Score

9^/10

evasion
- Checks for common network interception software
  Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
  evasion
- Enumerates VirtualBox registry keys
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Software Discovery

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2