Overview

overview

9

Static

static

b3d000e724...d9.exe

windows7-x64

9

b3d000e724...d9.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    b3d000e724a4ccea544c8d3f8904f056288212d82ae6c31e59d2c04ac23d33d9

  • Size

    512KB

  • Sample

    221128-h1m8tsae21

  • MD5

    44872bc10d3b32efcdabb85505f1c2b4

  • SHA1

    ad560ef4ab7080e1eb8bf0d379495a71763a5611

  • SHA256

    b3d000e724a4ccea544c8d3f8904f056288212d82ae6c31e59d2c04ac23d33d9

  • SHA512

    bd286be78dcc66489691224033ee8dbcc190fb3cd284fed292fa0fb26ab9240a3964642d67f12afad1f63c0934962bd9842d9209fcab5a6bd96c0397c8f22d80

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E46:0+h9OY70z+warul3E46

Score
9/10
evasion

Malware Config

Targets

    • Target

      b3d000e724a4ccea544c8d3f8904f056288212d82ae6c31e59d2c04ac23d33d9

    • Size

      512KB

    • MD5

      44872bc10d3b32efcdabb85505f1c2b4

    • SHA1

      ad560ef4ab7080e1eb8bf0d379495a71763a5611

    • SHA256

      b3d000e724a4ccea544c8d3f8904f056288212d82ae6c31e59d2c04ac23d33d9

    • SHA512

      bd286be78dcc66489691224033ee8dbcc190fb3cd284fed292fa0fb26ab9240a3964642d67f12afad1f63c0934962bd9842d9209fcab5a6bd96c0397c8f22d80

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E46:0+h9OY70z+warul3E46

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks