7dbc74483f6f009c86f1bf08f807860bbde88f52f444aeeaea4a32a828d8f961 | Triage

Sharing

General

Target

7dbc74483f6f009c86f1bf08f807860bbde88f52f444aeeaea4a32a828d8f961
Size

512KB
Sample

221127-1vr9psff4t
MD5

02de96aa98c792a31bce842b68a4ec6e
SHA1

7ff23162d7d47e87332c933b31641f12c0eaa849
SHA256

7dbc74483f6f009c86f1bf08f807860bbde88f52f444aeeaea4a32a828d8f961
SHA512

8ca58b58dfbf656e1175dc6926137eb3788a1e428ef53bc1d245f7cd6b50860e8677ff030beb8d4ef98c74020e645500e07ee8991919dad349538bf0569aa337
SSDEEP

12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4In:0+h9OY70z+warul3E4K

Score

9^/10

evasion

Malware Config

Targets

- Target
  
  7dbc74483f6f009c86f1bf08f807860bbde88f52f444aeeaea4a32a828d8f961
- Size
  
  512KB
- MD5
  
  02de96aa98c792a31bce842b68a4ec6e
- SHA1
  
  7ff23162d7d47e87332c933b31641f12c0eaa849
- SHA256
  
  7dbc74483f6f009c86f1bf08f807860bbde88f52f444aeeaea4a32a828d8f961
- SHA512
  
  8ca58b58dfbf656e1175dc6926137eb3788a1e428ef53bc1d245f7cd6b50860e8677ff030beb8d4ef98c74020e645500e07ee8991919dad349538bf0569aa337
- SSDEEP
  
  12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4In:0+h9OY70z+warul3E4K
Score

9^/10

evasion
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2