General

  • Target

    56e2de21970e5d45d318e497581aec735907c7abf7fd2a499cb31b95a3e7b49f

  • Size

    512KB

  • Sample

    221128-jtajtsce3z

  • MD5

    ea76b0f5b6fc75521d878cdc93ec7a12

  • SHA1

    908d51591ddb2571097b10a4faa1100f62120680

  • SHA256

    56e2de21970e5d45d318e497581aec735907c7abf7fd2a499cb31b95a3e7b49f

  • SHA512

    977e01bcdeb5cc921946bfe818d9ab0a7c6d5bce2c2d03c672ed541ffc6f14f86fdfcf47522ab2c96273ac61485ae9148d9e3caa94ca28548f89187850cad5e7

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E46:0+h9OY70z+warul3E46

Score
9/10

Malware Config

Targets

    • Target

      56e2de21970e5d45d318e497581aec735907c7abf7fd2a499cb31b95a3e7b49f

    • Size

      512KB

    • MD5

      ea76b0f5b6fc75521d878cdc93ec7a12

    • SHA1

      908d51591ddb2571097b10a4faa1100f62120680

    • SHA256

      56e2de21970e5d45d318e497581aec735907c7abf7fd2a499cb31b95a3e7b49f

    • SHA512

      977e01bcdeb5cc921946bfe818d9ab0a7c6d5bce2c2d03c672ed541ffc6f14f86fdfcf47522ab2c96273ac61485ae9148d9e3caa94ca28548f89187850cad5e7

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E46:0+h9OY70z+warul3E46

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks