Analysis
-
max time kernel
160s -
max time network
188s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
30-11-2022 23:36
General
-
Target
21c83de1c74aeea4b57fcfe71bddeab242bda604529e92e487a0931de5bceed1.exe
-
Size
570KB
-
MD5
0bf5a79f508676c7b6ca5ccdeb4ce490
-
SHA1
d04c501ae7eedef8c0c0132ebe7d844fa7b5ea15
-
SHA256
21c83de1c74aeea4b57fcfe71bddeab242bda604529e92e487a0931de5bceed1
-
SHA512
d1c0b85a730bed3a937c6048c9746bccb0b0b8ee03fef1b6fb033926a49086c06f94e2c735b12556d45478bcdcc0d7df2e1af5b6266b704eb741e217275d9f8e
-
SSDEEP
12288:roB/3ZSzTgu2VCBriSQxRLrEL6d1YtlndLCQZBWlUz0a40kf:roBxSv32VCBrivQ1VdLnZIULlY
Score
9/10
Malware Config
Signatures
-
Checks for common network interception software 1 TTPs
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys 2 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\21c83de1c74aeea4b57fcfe71bddeab242bda604529e92e487a0931de5bceed1.exe"C:\Users\Admin\AppData\Local\Temp\21c83de1c74aeea4b57fcfe71bddeab242bda604529e92e487a0931de5bceed1.exe"1⤵
- Enumerates VirtualBox registry keys
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
940KB
-
Filesize
64KB
-
Filesize
12KB
-
Filesize
940KB