Overview

overview

9

Static

static

15ca51d32a...1f.exe

windows7-x64

9

15ca51d32a...1f.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    15ca51d32ad7a3d1df83d79ea21659fda6f3c55db96ff275f128cab1a33a571f

  • Size

    624KB

  • Sample

    221127-k7c3jsad2z

  • MD5

    7e9d458dd41c2fd6673ceecd7e162b64

  • SHA1

    e9160b7961c08ca9912c6e384e1d78c19cfa846f

  • SHA256

    15ca51d32ad7a3d1df83d79ea21659fda6f3c55db96ff275f128cab1a33a571f

  • SHA512

    1fcaf36da79efc9f9df18f6c826f171b45c80cfdce0ccbba223ab6c575321d1681bb48391b3ddffce4e070e151ea71d338042d880adec96521d4202252912d08

  • SSDEEP

    12288:p93rW92itxpUGx1I/mCEUaQ9b0WF+cf6vDbRI4LBvhRybnlf61Y+m:3W92kUGx/s9bSvDbRlJ0bn81Y+m

Score
9/10
evasion

Malware Config

Targets

    • Target

      15ca51d32ad7a3d1df83d79ea21659fda6f3c55db96ff275f128cab1a33a571f

    • Size

      624KB

    • MD5

      7e9d458dd41c2fd6673ceecd7e162b64

    • SHA1

      e9160b7961c08ca9912c6e384e1d78c19cfa846f

    • SHA256

      15ca51d32ad7a3d1df83d79ea21659fda6f3c55db96ff275f128cab1a33a571f

    • SHA512

      1fcaf36da79efc9f9df18f6c826f171b45c80cfdce0ccbba223ab6c575321d1681bb48391b3ddffce4e070e151ea71d338042d880adec96521d4202252912d08

    • SSDEEP

      12288:p93rW92itxpUGx1I/mCEUaQ9b0WF+cf6vDbRI4LBvhRybnlf61Y+m:3W92kUGx/s9bSvDbRlJ0bn81Y+m

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks