Overview

overview

9

Static

static

3

b0011be8c7...d4.exe

windows7-x64

9

b0011be8c7...d4.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0011be8c7cd1c9865e1f1ed406197d4

  • Size

    12KB

  • Sample

    230630-jbqs4ahd4t

  • MD5

    b0011be8c7cd1c9865e1f1ed406197d4

  • SHA1

    ddf1f665023dcdddf23576d4db27e65323482d58

  • SHA256

    33e6b8a634ba08facba420eed6f61933570fb26e59fdba5a52603148c31e8792

  • SHA512

    6daddf405ee371d2e3e89972003d7c317cbc8b09e8231103eb5afcbc2b30dc47e8eff197be7553ce0c68727ae067f2f5d95a57b950725129808a5428fb7adb49

  • SSDEEP

    192:VqwFkb7H0rKTW2eOF93JceyCxk6XY5V87W1tf8UoupfJf6myRRW3ZDkmiPmiz10:BUTcOF7cDUk6XYSswunHhITG

Score
9/10
evasionpersistence

Malware Config

Targets

    • Target

      b0011be8c7cd1c9865e1f1ed406197d4

    • Size

      12KB

    • MD5

      b0011be8c7cd1c9865e1f1ed406197d4

    • SHA1

      ddf1f665023dcdddf23576d4db27e65323482d58

    • SHA256

      33e6b8a634ba08facba420eed6f61933570fb26e59fdba5a52603148c31e8792

    • SHA512

      6daddf405ee371d2e3e89972003d7c317cbc8b09e8231103eb5afcbc2b30dc47e8eff197be7553ce0c68727ae067f2f5d95a57b950725129808a5428fb7adb49

    • SSDEEP

      192:VqwFkb7H0rKTW2eOF93JceyCxk6XY5V87W1tf8UoupfJf6myRRW3ZDkmiPmiz10:BUTcOF7cDUk6XYSswunHhITG

    Score
    9/10
    evasionpersistence

    • Looks for VirtualBox Guest Additions in registry

      evasion

    • Looks for VMWare Tools registry key

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks