f0467d09df30e059a4ffe4ee3b5059255bb8d73e1f9abbf3e5d91d3c420a9d97 | Triage

Sharing

General

Target

f0467d09df30e059a4ffe4ee3b5059255bb8d73e1f9abbf3e5d91d3c420a9d97
Size

1.1MB
Sample

221201-tp1wbseh65
MD5

a3e68a6d92789c5d1b23ceb7795edb8b
SHA1

3c011be52a6578408fceb396dd2671e04cc2fef0
SHA256

f0467d09df30e059a4ffe4ee3b5059255bb8d73e1f9abbf3e5d91d3c420a9d97
SHA512

351f3569bb4d4c06a4d9c3c83ad11a7161af021f49367eff8ffac36362fd22b7563ddcb871399e74ed81868070e642e1423e15a5095076139ff332c92764e8fe
SSDEEP

24576:aYC2cDlXqbrINxoGeBzt/G4WonYkyCPG5f4ZGrMp2Bf:+1qbrW4zt/lbXYf4WMQf

Score

9^/10

evasion persistence

Malware Config

Targets

- Target
  
  f0467d09df30e059a4ffe4ee3b5059255bb8d73e1f9abbf3e5d91d3c420a9d97
- Size
  
  1.1MB
- MD5
  
  a3e68a6d92789c5d1b23ceb7795edb8b
- SHA1
  
  3c011be52a6578408fceb396dd2671e04cc2fef0
- SHA256
  
  f0467d09df30e059a4ffe4ee3b5059255bb8d73e1f9abbf3e5d91d3c420a9d97
- SHA512
  
  351f3569bb4d4c06a4d9c3c83ad11a7161af021f49367eff8ffac36362fd22b7563ddcb871399e74ed81868070e642e1423e15a5095076139ff332c92764e8fe
- SSDEEP
  
  24576:aYC2cDlXqbrINxoGeBzt/G4WonYkyCPG5f4ZGrMp2Bf:+1qbrW4zt/lbXYf4WMQf
Score

9^/10

evasion persistence
- Checks for common network interception software
  Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
  evasion
- Enumerates VirtualBox registry keys
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Software Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

evasionpersistence