Overview

overview

9

Static

static

51d8dfdcb1...a4.exe

windows7-x64

9

51d8dfdcb1...a4.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    51d8dfdcb1f8d8dbd5abe6e8a269fc60361efad2778c63a66d668623dfab73a4

  • Size

    512KB

  • Sample

    221127-mlxaeaae69

  • MD5

    f0f7859d54bf63fb6c65fbf124feed96

  • SHA1

    c7f7298cccdcbf766fa56be8c3b1c69764d326c7

  • SHA256

    51d8dfdcb1f8d8dbd5abe6e8a269fc60361efad2778c63a66d668623dfab73a4

  • SHA512

    8ebe286ecd98a5ea76a2bc6f72706107c4ab110220929979290fadef9a89e7e62f219e0f7ee80e1506a8e46a0099859ef8e1baf58db3e0223a6d204ff1fd5c7f

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4C:0+h9OY70z+warul3E4C

Score
9/10
evasion

Malware Config

Targets

    • Target

      51d8dfdcb1f8d8dbd5abe6e8a269fc60361efad2778c63a66d668623dfab73a4

    • Size

      512KB

    • MD5

      f0f7859d54bf63fb6c65fbf124feed96

    • SHA1

      c7f7298cccdcbf766fa56be8c3b1c69764d326c7

    • SHA256

      51d8dfdcb1f8d8dbd5abe6e8a269fc60361efad2778c63a66d668623dfab73a4

    • SHA512

      8ebe286ecd98a5ea76a2bc6f72706107c4ab110220929979290fadef9a89e7e62f219e0f7ee80e1506a8e46a0099859ef8e1baf58db3e0223a6d204ff1fd5c7f

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4C:0+h9OY70z+warul3E4C

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks