Overview

overview

9

Static

static

680c376720...55.exe

windows7-x64

9

680c376720...55.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    680c37672052fcd02659e2b8599ef0aa940ac35ea9939119465da431fe0f1c55

  • Size

    829KB

  • Sample

    221201-eagftabe66

  • MD5

    db638f83b76a15e474d809e7e671d182

  • SHA1

    ba6b6679cd082a46eebb074b9182eff3e3f0326c

  • SHA256

    680c37672052fcd02659e2b8599ef0aa940ac35ea9939119465da431fe0f1c55

  • SHA512

    57deae61142e14798da49835bedf959fee851ac742cc9beec4f22e69a31765c844cce6d7256dfa6c3ccd5b24e4cee9f51f0889c71ea791f243bbea8d07a45a70

  • SSDEEP

    24576:y21RDWTsGdIkJOihEUXpM52v9Z64Aimez8a:DDWAxkxEU5PZ6BeY

Score
9/10
evasionpersistence

Malware Config

Targets

    • Target

      680c37672052fcd02659e2b8599ef0aa940ac35ea9939119465da431fe0f1c55

    • Size

      829KB

    • MD5

      db638f83b76a15e474d809e7e671d182

    • SHA1

      ba6b6679cd082a46eebb074b9182eff3e3f0326c

    • SHA256

      680c37672052fcd02659e2b8599ef0aa940ac35ea9939119465da431fe0f1c55

    • SHA512

      57deae61142e14798da49835bedf959fee851ac742cc9beec4f22e69a31765c844cce6d7256dfa6c3ccd5b24e4cee9f51f0889c71ea791f243bbea8d07a45a70

    • SSDEEP

      24576:y21RDWTsGdIkJOihEUXpM52v9Z64Aimez8a:DDWAxkxEU5PZ6BeY

    Score
    9/10
    evasionpersistence

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks