Overview

overview

9

Static

static

a97264cede...d2.exe

windows7-x64

9

a97264cede...d2.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    a97264cede0a86891f11c07a029e8eab0b7cca758960289d88cf90b1263948d2

  • Size

    512KB

  • Sample

    221127-z3z4vadg5y

  • MD5

    cde9969dcbd5ae0cb348641eebafeaf8

  • SHA1

    294a8013d589b72437edf6a1a6d46967dbdc2b08

  • SHA256

    a97264cede0a86891f11c07a029e8eab0b7cca758960289d88cf90b1263948d2

  • SHA512

    69358c0796bbc7a4b4774660f0eac8400af3b958a6764fbe6d412e59f2a80fa1149d5cba554cc8cb67f844cf02d8f52e113a0b9c02dcce8edcc67d9a1ad1b7e2

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4u:0+h9OY70z+warul3E4u

Score
9/10
evasion

Malware Config

Targets

    • Target

      a97264cede0a86891f11c07a029e8eab0b7cca758960289d88cf90b1263948d2

    • Size

      512KB

    • MD5

      cde9969dcbd5ae0cb348641eebafeaf8

    • SHA1

      294a8013d589b72437edf6a1a6d46967dbdc2b08

    • SHA256

      a97264cede0a86891f11c07a029e8eab0b7cca758960289d88cf90b1263948d2

    • SHA512

      69358c0796bbc7a4b4774660f0eac8400af3b958a6764fbe6d412e59f2a80fa1149d5cba554cc8cb67f844cf02d8f52e113a0b9c02dcce8edcc67d9a1ad1b7e2

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4u:0+h9OY70z+warul3E4u

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks