General
-
Target
1916d5ca188ad0a0790bb378176859c10817d645b6f31b684eda7bd5eb8cf005
-
Size
512KB
-
Sample
221127-2x23csaf4v
-
MD5
e7e7e226e8ebbfc47c4fc2761dc29268
-
SHA1
fcd049dbaa2b09eb374b923c9e7f7eaaf69b59c4
-
SHA256
1916d5ca188ad0a0790bb378176859c10817d645b6f31b684eda7bd5eb8cf005
-
SHA512
ecf6ed669ffb50b321236a6a069f065ff532d9d628c27d7baf0e6f53a07855d7813230064910dc7059c12402885139eb9770fd87553aa07a41ce44a8c86e363f
-
SSDEEP
12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4q:0+h9OY70z+warul3E4q
Static task
static1
Behavioral task
behavioral1
Sample
1916d5ca188ad0a0790bb378176859c10817d645b6f31b684eda7bd5eb8cf005.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1916d5ca188ad0a0790bb378176859c10817d645b6f31b684eda7bd5eb8cf005.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
1916d5ca188ad0a0790bb378176859c10817d645b6f31b684eda7bd5eb8cf005
-
Size
512KB
-
MD5
e7e7e226e8ebbfc47c4fc2761dc29268
-
SHA1
fcd049dbaa2b09eb374b923c9e7f7eaaf69b59c4
-
SHA256
1916d5ca188ad0a0790bb378176859c10817d645b6f31b684eda7bd5eb8cf005
-
SHA512
ecf6ed669ffb50b321236a6a069f065ff532d9d628c27d7baf0e6f53a07855d7813230064910dc7059c12402885139eb9770fd87553aa07a41ce44a8c86e363f
-
SSDEEP
12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4q:0+h9OY70z+warul3E4q
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-