Overview

overview

9

Static

static

3

73e6f58939...bc.exe

windows7-x64

9

73e6f58939...bc.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    73e6f58939eee46b79cc0597e669f8bc

  • Size

    604KB

  • Sample

    231226-rad2xadff9

  • MD5

    73e6f58939eee46b79cc0597e669f8bc

  • SHA1

    cc899a6f1807490b721313efd5360e7bd5f891e0

  • SHA256

    10db506f0ee27f9c341c8c23fd6f0ea0383a7261f80a714c7837191ae20eaaff

  • SHA512

    be97b5daf14eafe39f3eec04d30aa2d9d573567d181193699992f0f098613c8d712acd55da608f29f7b0e74a6090f386a821bca2442fbe4da29c312e5a32b48d

  • SSDEEP

    12288:lqmSXl3v5iqGWvSOEZIJo333nEHYdpSYzcHwYm0h/pBWGXAO6rwT2Os9eNvjAdI:lXSXl3v5fv38naHYqVSZO6rwds9cvjAK

Score
9/10
evasion

Malware Config

Targets

    • Target

      73e6f58939eee46b79cc0597e669f8bc

    • Size

      604KB

    • MD5

      73e6f58939eee46b79cc0597e669f8bc

    • SHA1

      cc899a6f1807490b721313efd5360e7bd5f891e0

    • SHA256

      10db506f0ee27f9c341c8c23fd6f0ea0383a7261f80a714c7837191ae20eaaff

    • SHA512

      be97b5daf14eafe39f3eec04d30aa2d9d573567d181193699992f0f098613c8d712acd55da608f29f7b0e74a6090f386a821bca2442fbe4da29c312e5a32b48d

    • SSDEEP

      12288:lqmSXl3v5iqGWvSOEZIJo333nEHYdpSYzcHwYm0h/pBWGXAO6rwT2Os9eNvjAdI:lXSXl3v5fv38naHYqVSZO6rwds9cvjAK

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks