Overview

overview

9

Static

static

af1cddc0e7...84.exe

windows7-x64

9

af1cddc0e7...84.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    af1cddc0e7d4454bab37fa909080d92d4c97259f4a137416a8638d5cfc993584

  • Size

    524KB

  • Sample

    221204-qmqe2agb6z

  • MD5

    29c52ee10a2352220382e8796f00ef29

  • SHA1

    71e231a59e4a43e079460d17a91a7f4f21db6a63

  • SHA256

    af1cddc0e7d4454bab37fa909080d92d4c97259f4a137416a8638d5cfc993584

  • SHA512

    00d907a2c8568d95f5850198684bd52dbdff3d61d24c6f8ed73077f9a961e0e0c9fa1f8a36b9d027b13b1a64b7eff1ac376ce7b2db9735767d8f464578b14244

  • SSDEEP

    12288:AJuKBAjsT2ws4GrRu2QRqxqlOy8AF05yHk67zR960LF:AJuXsTuRRu2wqNGIyHr96i

Score
9/10
evasion

Malware Config

Targets

    • Target

      af1cddc0e7d4454bab37fa909080d92d4c97259f4a137416a8638d5cfc993584

    • Size

      524KB

    • MD5

      29c52ee10a2352220382e8796f00ef29

    • SHA1

      71e231a59e4a43e079460d17a91a7f4f21db6a63

    • SHA256

      af1cddc0e7d4454bab37fa909080d92d4c97259f4a137416a8638d5cfc993584

    • SHA512

      00d907a2c8568d95f5850198684bd52dbdff3d61d24c6f8ed73077f9a961e0e0c9fa1f8a36b9d027b13b1a64b7eff1ac376ce7b2db9735767d8f464578b14244

    • SSDEEP

      12288:AJuKBAjsT2ws4GrRu2QRqxqlOy8AF05yHk67zR960LF:AJuXsTuRRu2wqNGIyHr96i

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks