7601742c5daa223d23f8c2e206c13336a61310b51b48c5ba5fd1a2ccd0ecdb88 | Triage

Sharing

General

Target

7601742c5daa223d23f8c2e206c13336a61310b51b48c5ba5fd1a2ccd0ecdb88
Size

512KB
Sample

221127-ppzk2sca5w
MD5

77e19c3990d0503a6f384736b8f48a13
SHA1

a03aba531bcc07740535a51ec98b7021ada3d746
SHA256

7601742c5daa223d23f8c2e206c13336a61310b51b48c5ba5fd1a2ccd0ecdb88
SHA512

bb96758d3ecd88415f5e3d4db49553073d6b7320404b34ebd61c4ab9b36c6e01c154db41c7d06d1d2f4abe78e4780ff931995ce6d2c02a400b009db795c71715
SSDEEP

12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4O:0+h9OY70z+warul3E4O

Score

9^/10

evasion

Malware Config

Targets

- Target
  
  7601742c5daa223d23f8c2e206c13336a61310b51b48c5ba5fd1a2ccd0ecdb88
- Size
  
  512KB
- MD5
  
  77e19c3990d0503a6f384736b8f48a13
- SHA1
  
  a03aba531bcc07740535a51ec98b7021ada3d746
- SHA256
  
  7601742c5daa223d23f8c2e206c13336a61310b51b48c5ba5fd1a2ccd0ecdb88
- SHA512
  
  bb96758d3ecd88415f5e3d4db49553073d6b7320404b34ebd61c4ab9b36c6e01c154db41c7d06d1d2f4abe78e4780ff931995ce6d2c02a400b009db795c71715
- SSDEEP
  
  12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4O:0+h9OY70z+warul3E4O
Score

9^/10

evasion
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  evasion
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2