General

  • Target

    d62e814b67078685ce1b1cec18ef5e18e4dd0a2fcb40a4bb6990074c11fb3d2c

  • Size

    512KB

  • Sample

    221127-3xvhysdd51

  • MD5

    e948aa72dab1153b5e5881556b78bf59

  • SHA1

    d3fb984563f83d7822a618cf016190360fdbd841

  • SHA256

    d62e814b67078685ce1b1cec18ef5e18e4dd0a2fcb40a4bb6990074c11fb3d2c

  • SHA512

    71dd2b3430c046127574b230252ecbd74093a3be26366143614cedb82f5f03e8ca61c473baf9969e31c920e1fc3e14c07e83af70c4ba9d8e83251b75de944663

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E41:0+h9OY70z+warul3E41

Score
9/10

Malware Config

Targets

    • Target

      d62e814b67078685ce1b1cec18ef5e18e4dd0a2fcb40a4bb6990074c11fb3d2c

    • Size

      512KB

    • MD5

      e948aa72dab1153b5e5881556b78bf59

    • SHA1

      d3fb984563f83d7822a618cf016190360fdbd841

    • SHA256

      d62e814b67078685ce1b1cec18ef5e18e4dd0a2fcb40a4bb6990074c11fb3d2c

    • SHA512

      71dd2b3430c046127574b230252ecbd74093a3be26366143614cedb82f5f03e8ca61c473baf9969e31c920e1fc3e14c07e83af70c4ba9d8e83251b75de944663

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E41:0+h9OY70z+warul3E41

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks