Overview

overview

9

Static

static

2e3626027e...38.exe

windows7-x64

9

2e3626027e...38.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e3626027e5724abdd985ab6a03b9f34198a8a9ea8a46a381370c945df8bdb38

  • Size

    512KB

  • Sample

    221127-vzjkgaaa4w

  • MD5

    e17d2167c52925fb069f24a44a02589b

  • SHA1

    4897bdd6358db29f956f5813afecf922bb80d7f5

  • SHA256

    2e3626027e5724abdd985ab6a03b9f34198a8a9ea8a46a381370c945df8bdb38

  • SHA512

    e5403b60aa8f837699ca9f1874ae96fb3d7f571e8650c02d2c65d473cf957ddc0fb9a28d1664de1d96cd1c6b7839e697fd56028907f01697f72baaea65592dda

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4b:0+h9OY70z+warul3E4b

Score
9/10
evasion

Malware Config

Targets

    • Target

      2e3626027e5724abdd985ab6a03b9f34198a8a9ea8a46a381370c945df8bdb38

    • Size

      512KB

    • MD5

      e17d2167c52925fb069f24a44a02589b

    • SHA1

      4897bdd6358db29f956f5813afecf922bb80d7f5

    • SHA256

      2e3626027e5724abdd985ab6a03b9f34198a8a9ea8a46a381370c945df8bdb38

    • SHA512

      e5403b60aa8f837699ca9f1874ae96fb3d7f571e8650c02d2c65d473cf957ddc0fb9a28d1664de1d96cd1c6b7839e697fd56028907f01697f72baaea65592dda

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4b:0+h9OY70z+warul3E4b

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks