Overview

overview

9

Static

static

3

fba3cc2b5b...22.exe

windows7-x64

9

fba3cc2b5b...22.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    fba3cc2b5b05ae35502a3217c12ea822

  • Size

    791KB

  • Sample

    231228-113ydsfhb4

  • MD5

    fba3cc2b5b05ae35502a3217c12ea822

  • SHA1

    3ecaa0948e6c23efd01498e3ad80895b60cbe50e

  • SHA256

    8eead8f7b54f912cbb2576b35cece9b9d0d612ba4c2089af0c0fc8fcc7e4356f

  • SHA512

    9c1750a8b45881288615290ac61ef974f701db1eab89ceb88e3dfbb8d86807e31445dbd43035c842c4dc08a988fb491a4811bdf38ba413983fca9db08117db0c

  • SSDEEP

    24576:JZdeSrgJZ583CJt14UFds3p8dSIlswTeMrIXgW:JH4ZO3CJX4UFdH0Ilsu3rYh

Score
9/10
evasion

Malware Config

Targets

    • Target

      fba3cc2b5b05ae35502a3217c12ea822

    • Size

      791KB

    • MD5

      fba3cc2b5b05ae35502a3217c12ea822

    • SHA1

      3ecaa0948e6c23efd01498e3ad80895b60cbe50e

    • SHA256

      8eead8f7b54f912cbb2576b35cece9b9d0d612ba4c2089af0c0fc8fcc7e4356f

    • SHA512

      9c1750a8b45881288615290ac61ef974f701db1eab89ceb88e3dfbb8d86807e31445dbd43035c842c4dc08a988fb491a4811bdf38ba413983fca9db08117db0c

    • SSDEEP

      24576:JZdeSrgJZ583CJt14UFds3p8dSIlswTeMrIXgW:JH4ZO3CJX4UFdH0Ilsu3rYh

    Score
    9/10
    evasion

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks