Overview

overview

9

Static

static

b0068bf51b...d6.exe

windows7-x64

9

b0068bf51b...d6.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    b0068bf51bb729cd5b6bf71ea3a46ab8725179f5b413b359bad3343223f392d6

  • Size

    564KB

  • Sample

    221204-frkp8shf33

  • MD5

    14792c79ab05105d2cfcaf91c7676306

  • SHA1

    564bc494a9d770b5858ef60570b6d6eda5f4e481

  • SHA256

    b0068bf51bb729cd5b6bf71ea3a46ab8725179f5b413b359bad3343223f392d6

  • SHA512

    6dc676ee47c8f8384c5883484fa6561d20edd2c03565256bae7eef7d8e2362053d25d5269cd508d65748a1e7b559e12313c4c99d2aef843d1d5cef13ab289847

  • SSDEEP

    12288:cNEC2EhjTO5ApVsx4c7siJMKbSTu5eG3uAscMJUL:cNECjTLp8ZfUGNspUL

Score
9/10
evasion

Malware Config

Targets

    • Target

      b0068bf51bb729cd5b6bf71ea3a46ab8725179f5b413b359bad3343223f392d6

    • Size

      564KB

    • MD5

      14792c79ab05105d2cfcaf91c7676306

    • SHA1

      564bc494a9d770b5858ef60570b6d6eda5f4e481

    • SHA256

      b0068bf51bb729cd5b6bf71ea3a46ab8725179f5b413b359bad3343223f392d6

    • SHA512

      6dc676ee47c8f8384c5883484fa6561d20edd2c03565256bae7eef7d8e2362053d25d5269cd508d65748a1e7b559e12313c4c99d2aef843d1d5cef13ab289847

    • SSDEEP

      12288:cNEC2EhjTO5ApVsx4c7siJMKbSTu5eG3uAscMJUL:cNECjTLp8ZfUGNspUL

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks