Overview

overview

9

Static

static

9afbda5328...0f.exe

windows7-x64

9

9afbda5328...0f.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9afbda5328135a5c6b9af53909a2e7062324f36d28c3d3547c58c2922fbae90f

  • Size

    597KB

  • Sample

    221127-skl1yabd6v

  • MD5

    a97ab28b02be5cdbbc48d29f458eec97

  • SHA1

    7a237fdcb975cbef3c898ff3a106facf167e0a15

  • SHA256

    9afbda5328135a5c6b9af53909a2e7062324f36d28c3d3547c58c2922fbae90f

  • SHA512

    00264a976e3c1f298cee4b5c622e2599680a36b602e1382275dd9be03b4c120d3f4cbf248884f8213674718c51006a0825e39883f8ebd51c5f2b4e4eb7a64e7d

  • SSDEEP

    12288:AeABzSxtUS4w0IHYQJ8iZ+9YIjEOQN8+2cMTReObmZtOs2rO+ZAd5:AF9SxaIHFWPENp2c4Re5ZQs+O4An

Score
9/10
evasion

Malware Config

Targets

    • Target

      9afbda5328135a5c6b9af53909a2e7062324f36d28c3d3547c58c2922fbae90f

    • Size

      597KB

    • MD5

      a97ab28b02be5cdbbc48d29f458eec97

    • SHA1

      7a237fdcb975cbef3c898ff3a106facf167e0a15

    • SHA256

      9afbda5328135a5c6b9af53909a2e7062324f36d28c3d3547c58c2922fbae90f

    • SHA512

      00264a976e3c1f298cee4b5c622e2599680a36b602e1382275dd9be03b4c120d3f4cbf248884f8213674718c51006a0825e39883f8ebd51c5f2b4e4eb7a64e7d

    • SSDEEP

      12288:AeABzSxtUS4w0IHYQJ8iZ+9YIjEOQN8+2cMTReObmZtOs2rO+ZAd5:AF9SxaIHFWPENp2c4Re5ZQs+O4An

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks