Overview

overview

9

Static

static

d3854121ce...10.exe

windows7-x64

9

d3854121ce...10.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3854121cecc2463de5294806eb8a72dc71d1bcd2af261c4a4472e6da22a5910

  • Size

    623KB

  • Sample

    221127-gr5wvaea26

  • MD5

    77a4f3ff290ab300e755d03ec655e8d7

  • SHA1

    2aa91056417393c4f253fa96d9c5fd4753f1669e

  • SHA256

    d3854121cecc2463de5294806eb8a72dc71d1bcd2af261c4a4472e6da22a5910

  • SHA512

    6b4f1570bc9708d518fde7e06bc0a6337f6449aed87e05b27fe4b13573ed375bbd3e4d4066b828d84555a78a63aa6878c192689d269dc0c1ab7be0cf0fcfeb1c

  • SSDEEP

    12288:XQXik2ugDdI251hczaS3wc4CUu4SRFZ0yD2C:1k2uN+0H3TXFRFqyD2C

Score
9/10
evasion

Malware Config

Targets

    • Target

      d3854121cecc2463de5294806eb8a72dc71d1bcd2af261c4a4472e6da22a5910

    • Size

      623KB

    • MD5

      77a4f3ff290ab300e755d03ec655e8d7

    • SHA1

      2aa91056417393c4f253fa96d9c5fd4753f1669e

    • SHA256

      d3854121cecc2463de5294806eb8a72dc71d1bcd2af261c4a4472e6da22a5910

    • SHA512

      6b4f1570bc9708d518fde7e06bc0a6337f6449aed87e05b27fe4b13573ed375bbd3e4d4066b828d84555a78a63aa6878c192689d269dc0c1ab7be0cf0fcfeb1c

    • SSDEEP

      12288:XQXik2ugDdI251hczaS3wc4CUu4SRFZ0yD2C:1k2uN+0H3TXFRFqyD2C

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks