Overview

overview

9

Static

static

990a803fe0...54.exe

windows7-x64

9

990a803fe0...54.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    990a803fe0bd9fcbe9f033b5be9bfb3d7f5eb1f53434cfcd1fb2306238d68954

  • Size

    512KB

  • Sample

    221128-h82feseg35

  • MD5

    cb3eb15e0de9a7c2503a7ae5117b9df4

  • SHA1

    32cdfbc9986ac5a3140fd9305b38f7ddb13f4415

  • SHA256

    990a803fe0bd9fcbe9f033b5be9bfb3d7f5eb1f53434cfcd1fb2306238d68954

  • SHA512

    40ace367987f0e6fabb5f5a804700710b485a0a5c6b22b52778af04c45c131ac0b23f4eb7a6471bf39a498c64d6a76735ab507e4fdf6d2e10be09afde2d0226e

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4c:0+h9OY70z+warul3E4c

Score
9/10
evasion

Malware Config

Targets

    • Target

      990a803fe0bd9fcbe9f033b5be9bfb3d7f5eb1f53434cfcd1fb2306238d68954

    • Size

      512KB

    • MD5

      cb3eb15e0de9a7c2503a7ae5117b9df4

    • SHA1

      32cdfbc9986ac5a3140fd9305b38f7ddb13f4415

    • SHA256

      990a803fe0bd9fcbe9f033b5be9bfb3d7f5eb1f53434cfcd1fb2306238d68954

    • SHA512

      40ace367987f0e6fabb5f5a804700710b485a0a5c6b22b52778af04c45c131ac0b23f4eb7a6471bf39a498c64d6a76735ab507e4fdf6d2e10be09afde2d0226e

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4c:0+h9OY70z+warul3E4c

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks