Analysis
-
max time kernel
142s -
max time network
202s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
03-12-2022 14:44
General
-
Target
b63ec0bbdb03c3f7175bdac2ac63bef1dc893f4085cd578ba270c56c5b2fbc32.exe
-
Size
850KB
-
MD5
ea8f14f3c39420f966170e89bb3d3aef
-
SHA1
04614f8acc9f33391fd7e5fa7584a4ff6408a8e1
-
SHA256
b63ec0bbdb03c3f7175bdac2ac63bef1dc893f4085cd578ba270c56c5b2fbc32
-
SHA512
3a8399b0f327415144379e1c29f1e42c4bb81143957a084ed8eee53e9b29fd479470302544ffda9d41caf894ad51c844d75469eef241de3bbf1d08d516160d68
-
SSDEEP
24576:ogoRDL6Y8z7xUlW8ZFOsIYIXDWXQb1fvFPxQvJw4xH:o5xgxUlzFOsIYIzWXQb1nFPxQGq
Score
9/10
Malware Config
Signatures
-
Checks for common network interception software 1 TTPs
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys 2 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b63ec0bbdb03c3f7175bdac2ac63bef1dc893f4085cd578ba270c56c5b2fbc32.exe"C:\Users\Admin\AppData\Local\Temp\b63ec0bbdb03c3f7175bdac2ac63bef1dc893f4085cd578ba270c56c5b2fbc32.exe"1⤵
- Enumerates VirtualBox registry keys
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
76KB
-
Filesize
1.5MB
-
Filesize
8KB
-
Filesize
12KB
-
Filesize
76KB
-
Filesize
1.5MB
-
Filesize
12KB
-
Filesize
76KB