Overview

overview

9

Static

static

c006da846b...78.exe

windows7-x64

9

c006da846b...78.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    c006da846b9f4104eba184a971109eb47e44c99c256ab26a9a21a3c114fc5378

  • Size

    512KB

  • Sample

    221128-hxh5psab91

  • MD5

    22fcf7be3c3b211e67f495796f2b15ee

  • SHA1

    f9ce51de2bbb487d9f93d889dc5dc8194f63a07e

  • SHA256

    c006da846b9f4104eba184a971109eb47e44c99c256ab26a9a21a3c114fc5378

  • SHA512

    27ac91177b2e83ad3d1cdd6e14a695b81fc062f02137b8110888d66b68a096134369352767ef2455a81e6e0a6f3c4c310437d24555ff8602e131c7d590f64b46

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E48:0+h9OY70z+warul3E48

Score
9/10
evasion

Malware Config

Targets

    • Target

      c006da846b9f4104eba184a971109eb47e44c99c256ab26a9a21a3c114fc5378

    • Size

      512KB

    • MD5

      22fcf7be3c3b211e67f495796f2b15ee

    • SHA1

      f9ce51de2bbb487d9f93d889dc5dc8194f63a07e

    • SHA256

      c006da846b9f4104eba184a971109eb47e44c99c256ab26a9a21a3c114fc5378

    • SHA512

      27ac91177b2e83ad3d1cdd6e14a695b81fc062f02137b8110888d66b68a096134369352767ef2455a81e6e0a6f3c4c310437d24555ff8602e131c7d590f64b46

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E48:0+h9OY70z+warul3E48

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks