Overview

overview

9

Static

static

3

11ad0fa901...e5.exe

windows7-x64

1

11ad0fa901...e5.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    11ad0fa9012b512c2356a7692752e7e5

  • Size

    512KB

  • Sample

    231225-j9lxssadcr

  • MD5

    11ad0fa9012b512c2356a7692752e7e5

  • SHA1

    81f80b87c61d5b3e1b4efe11af8a0de64c12b92b

  • SHA256

    1081d5c8b5d5dbff0bbd476d0c0794e42dd5b034d440a00d9cc7d96c5fbcf1d1

  • SHA512

    f6143e3d5f0c739ef0d23a64e667f25a9d25b0c528a4dd5cb9a9594883c6971771ee4eae6a5860e6b3cc97c219bd269f909686ce04cf9266fbe4cf5da0f53bc0

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4J:0+h9OY70z+warul3E4J

Score
9/10
evasion

Malware Config

Targets

    • Target

      11ad0fa9012b512c2356a7692752e7e5

    • Size

      512KB

    • MD5

      11ad0fa9012b512c2356a7692752e7e5

    • SHA1

      81f80b87c61d5b3e1b4efe11af8a0de64c12b92b

    • SHA256

      1081d5c8b5d5dbff0bbd476d0c0794e42dd5b034d440a00d9cc7d96c5fbcf1d1

    • SHA512

      f6143e3d5f0c739ef0d23a64e667f25a9d25b0c528a4dd5cb9a9594883c6971771ee4eae6a5860e6b3cc97c219bd269f909686ce04cf9266fbe4cf5da0f53bc0

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4J:0+h9OY70z+warul3E4J

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks