Overview

overview

9

Static

static

3

1bf7ebce75...9c.exe

windows7-x64

9

1bf7ebce75...9c.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1bf7ebce758129cfa4632b6f83dc869c

  • Size

    760KB

  • Sample

    231230-zergssgfh2

  • MD5

    1bf7ebce758129cfa4632b6f83dc869c

  • SHA1

    a36abad5c08b8dec1a8f6957e1ef18b6ac0ec550

  • SHA256

    41c201ca2cc12675d8937e40d89aa0d16034b1197ab378cead4ca28952b85b96

  • SHA512

    8dffbf9ca9c637b6b010b68b3e7e8c6701481f2fffd970cc943e237fc7f4cab652844965eba501cc735d7e719be30e91693382db02e7248be6522b29a8d9b032

  • SSDEEP

    12288:y3Qdh03A7vRvqNA8HVcGmoi3jRREcXjXYEAw8twRohczuVKseNb4dZK:y3H2RvqNl+Gmoi3VREMDdAwewEczuYs

Score
9/10
evasionpersistence

Malware Config

Targets

    • Target

      1bf7ebce758129cfa4632b6f83dc869c

    • Size

      760KB

    • MD5

      1bf7ebce758129cfa4632b6f83dc869c

    • SHA1

      a36abad5c08b8dec1a8f6957e1ef18b6ac0ec550

    • SHA256

      41c201ca2cc12675d8937e40d89aa0d16034b1197ab378cead4ca28952b85b96

    • SHA512

      8dffbf9ca9c637b6b010b68b3e7e8c6701481f2fffd970cc943e237fc7f4cab652844965eba501cc735d7e719be30e91693382db02e7248be6522b29a8d9b032

    • SSDEEP

      12288:y3Qdh03A7vRvqNA8HVcGmoi3jRREcXjXYEAw8twRohczuVKseNb4dZK:y3H2RvqNl+Gmoi3VREMDdAwewEczuYs

    Score
    9/10
    evasionpersistence

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks