General

  • Target

    9e0881691e67eb02c93bf30fb26a9ab2e2cbb3d7cba8e190156470e71086f16a

  • Size

    512KB

  • Sample

    221128-h7jtzsah6t

  • MD5

    80c28a21af84633977cf7f85c057b7a0

  • SHA1

    424139b364440f7dfb9d8288e4b5e503eaadfc81

  • SHA256

    9e0881691e67eb02c93bf30fb26a9ab2e2cbb3d7cba8e190156470e71086f16a

  • SHA512

    a0e60d9bfaed0540b3fc64d8c3fe7932777fd3f742b9119ea7ef3ff9b57e2c1dfeba65593ac5da199e897d579f46262842c3c71d959a033382525ab2540795fb

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4C:0+h9OY70z+warul3E4C

Score
9/10

Malware Config

Targets

    • Target

      9e0881691e67eb02c93bf30fb26a9ab2e2cbb3d7cba8e190156470e71086f16a

    • Size

      512KB

    • MD5

      80c28a21af84633977cf7f85c057b7a0

    • SHA1

      424139b364440f7dfb9d8288e4b5e503eaadfc81

    • SHA256

      9e0881691e67eb02c93bf30fb26a9ab2e2cbb3d7cba8e190156470e71086f16a

    • SHA512

      a0e60d9bfaed0540b3fc64d8c3fe7932777fd3f742b9119ea7ef3ff9b57e2c1dfeba65593ac5da199e897d579f46262842c3c71d959a033382525ab2540795fb

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4C:0+h9OY70z+warul3E4C

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks