Overview

overview

8

Static

static

LoaderVIP.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    LoaderVIP.exe

  • Size

    16KB

  • Sample

    230109-d6twcach34

  • MD5

    6f5421bf85609014b9d02dfdd8d3bb63

  • SHA1

    9badca86c2b8c820f9550175dc9057aeaf806dc9

  • SHA256

    c664614d5d1e59781979ae6798e22bfc58806bf69f53733c0c5a442a5ece569d

  • SHA512

    8284007e621155b58dcebdcf5327585f5cb4c78b7da63eae075f3e2d5f462cd3ad8549f2728d921690015358dcdf6fa3a8008966794b7daa265de81e19d5286e

  • SSDEEP

    384:3n79UVHt9Qtl/Tehau23G6c6YcN09t6cDE33DhSHkON/GlfgOb5:3WptYQhaN39W4JiE33VSEONulfgO

Score
8/10

Malware Config

Targets

    • Target

      LoaderVIP.exe

    • Size

      16KB

    • MD5

      6f5421bf85609014b9d02dfdd8d3bb63

    • SHA1

      9badca86c2b8c820f9550175dc9057aeaf806dc9

    • SHA256

      c664614d5d1e59781979ae6798e22bfc58806bf69f53733c0c5a442a5ece569d

    • SHA512

      8284007e621155b58dcebdcf5327585f5cb4c78b7da63eae075f3e2d5f462cd3ad8549f2728d921690015358dcdf6fa3a8008966794b7daa265de81e19d5286e

    • SSDEEP

      384:3n79UVHt9Qtl/Tehau23G6c6YcN09t6cDE33DhSHkON/GlfgOb5:3WptYQhaN39W4JiE33VSEONulfgO

    Score
    8/10

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks