Overview

overview

9

Static

static

ab718a57bc...99.exe

windows7-x64

9

ab718a57bc...99.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    ab718a57bc13398765834dce7aa427f23e4f44116d8a8b958010ea6fdbd06299

  • Size

    512KB

  • Sample

    221127-1rwgysfd8t

  • MD5

    132c91ddf4bf38f2f1853206f64aaa00

  • SHA1

    a4bd0fb1ea8dbe19c2c1c15f0266efab81bde902

  • SHA256

    ab718a57bc13398765834dce7aa427f23e4f44116d8a8b958010ea6fdbd06299

  • SHA512

    0c42237b31b753e52c67f2609a409c587718a8f46520468890083273d8fa4363ac7731fe84f058a1b5f401e6c682b1c6c39a8d5f3e3304c3f84c25296825fbaa

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4R:0+h9OY70z+warul3E4R

Score
9/10
evasion

Malware Config

Targets

    • Target

      ab718a57bc13398765834dce7aa427f23e4f44116d8a8b958010ea6fdbd06299

    • Size

      512KB

    • MD5

      132c91ddf4bf38f2f1853206f64aaa00

    • SHA1

      a4bd0fb1ea8dbe19c2c1c15f0266efab81bde902

    • SHA256

      ab718a57bc13398765834dce7aa427f23e4f44116d8a8b958010ea6fdbd06299

    • SHA512

      0c42237b31b753e52c67f2609a409c587718a8f46520468890083273d8fa4363ac7731fe84f058a1b5f401e6c682b1c6c39a8d5f3e3304c3f84c25296825fbaa

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4R:0+h9OY70z+warul3E4R

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks