General

  • Target

    1916d5ca188ad0a0790bb378176859c10817d645b6f31b684eda7bd5eb8cf005

  • Size

    512KB

  • Sample

    221127-2x23csaf4v

  • MD5

    e7e7e226e8ebbfc47c4fc2761dc29268

  • SHA1

    fcd049dbaa2b09eb374b923c9e7f7eaaf69b59c4

  • SHA256

    1916d5ca188ad0a0790bb378176859c10817d645b6f31b684eda7bd5eb8cf005

  • SHA512

    ecf6ed669ffb50b321236a6a069f065ff532d9d628c27d7baf0e6f53a07855d7813230064910dc7059c12402885139eb9770fd87553aa07a41ce44a8c86e363f

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4q:0+h9OY70z+warul3E4q

Score
9/10

Malware Config

Targets

    • Target

      1916d5ca188ad0a0790bb378176859c10817d645b6f31b684eda7bd5eb8cf005

    • Size

      512KB

    • MD5

      e7e7e226e8ebbfc47c4fc2761dc29268

    • SHA1

      fcd049dbaa2b09eb374b923c9e7f7eaaf69b59c4

    • SHA256

      1916d5ca188ad0a0790bb378176859c10817d645b6f31b684eda7bd5eb8cf005

    • SHA512

      ecf6ed669ffb50b321236a6a069f065ff532d9d628c27d7baf0e6f53a07855d7813230064910dc7059c12402885139eb9770fd87553aa07a41ce44a8c86e363f

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4q:0+h9OY70z+warul3E4q

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks