1452cef05a71e18a54caaeac6939ec80f50d42364b67e4478196195a85a2e54e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1452cef05a71e18a54caaeac6939ec80f50d42364b67e4478196195a85a2e54e
Size

748KB
Sample

221201-k93e8adg33
MD5

81e494251fb7aca56b4c0a0e42abba3a
SHA1

c9317b758e9f30d45f6205a00ff0618a3915349b
SHA256

1452cef05a71e18a54caaeac6939ec80f50d42364b67e4478196195a85a2e54e
SHA512

b3753605c3500b95cb803a6c1e34e262312733e1da856c78a76e2ccae50efb959f1998ee2a00bf919ecbc5aef2cc246907df8771f5bc1ca311bb03c46f60b8af
SSDEEP

12288:84kGRK9bZhGCkm33z3h8avLX+OuM33h/Mtn7UCHqpIgxCLcb:84FR8ZIgj3BzuOuM33h/EQIqmgxCwb

Score

9^/10

evasion

Malware Config

Targets

- Target
  
  1452cef05a71e18a54caaeac6939ec80f50d42364b67e4478196195a85a2e54e
- Size
  
  748KB
- MD5
  
  81e494251fb7aca56b4c0a0e42abba3a
- SHA1
  
  c9317b758e9f30d45f6205a00ff0618a3915349b
- SHA256
  
  1452cef05a71e18a54caaeac6939ec80f50d42364b67e4478196195a85a2e54e
- SHA512
  
  b3753605c3500b95cb803a6c1e34e262312733e1da856c78a76e2ccae50efb959f1998ee2a00bf919ecbc5aef2cc246907df8771f5bc1ca311bb03c46f60b8af
- SSDEEP
  
  12288:84kGRK9bZhGCkm33z3h8avLX+OuM33h/Mtn7UCHqpIgxCLcb:84FR8ZIgj3BzuOuM33h/EQIqmgxCwb
Score

9^/10

evasion
- Checks for common network interception software
  Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
  evasion
- Enumerates VirtualBox registry keys
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Software Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2