a02098982a854456f72a617fe6eabb5e8343c726fd2da3e7991b034e0be9b1cc | Triage

Sharing

General

Target

0eb67e42c017df4483d6c8aeb5ec5960
Size

921KB
Sample

231230-e896saeddl
MD5

0eb67e42c017df4483d6c8aeb5ec5960
SHA1

235bcde3f0dcf9d25ffaa33b5a61744738ec3b29
SHA256

a02098982a854456f72a617fe6eabb5e8343c726fd2da3e7991b034e0be9b1cc
SHA512

51880fb5b41eaaf2b9e3cfed2d8aeb74f18efdb29befd3fb76b99fd6c49df412848c1bace489a30b31c50abf165e7b93b197f21f2940dfd4d789525780d02a85
SSDEEP

12288:Ks7bVlehF7qoQC5yVaYwtEaoNXGhDGp0WGnA28xdisUIedoziBsNR8RRqyE2uT6a:KwbVlehFenNVrwRoNGhyCWGnAlbotE

Score

9^/10

evasion

Malware Config

Targets

- Target
  
  0eb67e42c017df4483d6c8aeb5ec5960
- Size
  
  921KB
- MD5
  
  0eb67e42c017df4483d6c8aeb5ec5960
- SHA1
  
  235bcde3f0dcf9d25ffaa33b5a61744738ec3b29
- SHA256
  
  a02098982a854456f72a617fe6eabb5e8343c726fd2da3e7991b034e0be9b1cc
- SHA512
  
  51880fb5b41eaaf2b9e3cfed2d8aeb74f18efdb29befd3fb76b99fd6c49df412848c1bace489a30b31c50abf165e7b93b197f21f2940dfd4d789525780d02a85
- SSDEEP
  
  12288:Ks7bVlehF7qoQC5yVaYwtEaoNXGhDGp0WGnA28xdisUIedoziBsNR8RRqyE2uT6a:KwbVlehFenNVrwRoNGhyCWGnAlbotE
Score

9^/10

evasion
- Looks for VirtualBox Guest Additions in registry
  evasion
- Looks for VMWare Tools registry key
  evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2