fe13949ebc407ac69c133bdb712a493f29dd6ffdac40a8e7c2b5544ffba1450e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe13949ebc407ac69c133bdb712a493f29dd6ffdac40a8e7c2b5544ffba1450e
Size

512KB
Sample

221128-hc223sgg4x
MD5

40520d40fe834f371a00ffa5b8c5ce14
SHA1

becb0cf7ee5f3418c43eca2bea9fc71a215bd9ba
SHA256

fe13949ebc407ac69c133bdb712a493f29dd6ffdac40a8e7c2b5544ffba1450e
SHA512

3abcbd3b78812b3955ecd8fa855c1a12194964aa253f324bbfa8f41721cd2827777607ebc64be3fcf48f4ecc81d2dde655bf80de6af6efce373c5f4de543fcf9
SSDEEP

12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4q:0+h9OY70z+warul3E4q

Score

9^/10

evasion

Malware Config

Targets

- Target
  
  fe13949ebc407ac69c133bdb712a493f29dd6ffdac40a8e7c2b5544ffba1450e
- Size
  
  512KB
- MD5
  
  40520d40fe834f371a00ffa5b8c5ce14
- SHA1
  
  becb0cf7ee5f3418c43eca2bea9fc71a215bd9ba
- SHA256
  
  fe13949ebc407ac69c133bdb712a493f29dd6ffdac40a8e7c2b5544ffba1450e
- SHA512
  
  3abcbd3b78812b3955ecd8fa855c1a12194964aa253f324bbfa8f41721cd2827777607ebc64be3fcf48f4ecc81d2dde655bf80de6af6efce373c5f4de543fcf9
- SSDEEP
  
  12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4q:0+h9OY70z+warul3E4q
Score

9^/10

evasion
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  evasion
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2