General
-
Target
d62e814b67078685ce1b1cec18ef5e18e4dd0a2fcb40a4bb6990074c11fb3d2c
-
Size
512KB
-
Sample
221127-3xvhysdd51
-
MD5
e948aa72dab1153b5e5881556b78bf59
-
SHA1
d3fb984563f83d7822a618cf016190360fdbd841
-
SHA256
d62e814b67078685ce1b1cec18ef5e18e4dd0a2fcb40a4bb6990074c11fb3d2c
-
SHA512
71dd2b3430c046127574b230252ecbd74093a3be26366143614cedb82f5f03e8ca61c473baf9969e31c920e1fc3e14c07e83af70c4ba9d8e83251b75de944663
-
SSDEEP
12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E41:0+h9OY70z+warul3E41
Static task
static1
Behavioral task
behavioral1
Sample
d62e814b67078685ce1b1cec18ef5e18e4dd0a2fcb40a4bb6990074c11fb3d2c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d62e814b67078685ce1b1cec18ef5e18e4dd0a2fcb40a4bb6990074c11fb3d2c.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
d62e814b67078685ce1b1cec18ef5e18e4dd0a2fcb40a4bb6990074c11fb3d2c
-
Size
512KB
-
MD5
e948aa72dab1153b5e5881556b78bf59
-
SHA1
d3fb984563f83d7822a618cf016190360fdbd841
-
SHA256
d62e814b67078685ce1b1cec18ef5e18e4dd0a2fcb40a4bb6990074c11fb3d2c
-
SHA512
71dd2b3430c046127574b230252ecbd74093a3be26366143614cedb82f5f03e8ca61c473baf9969e31c920e1fc3e14c07e83af70c4ba9d8e83251b75de944663
-
SSDEEP
12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E41:0+h9OY70z+warul3E41
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-