Overview

overview

9

Static

static

1

2024-01-09...ia.exe

windows7-x64

9

2024-01-09...ia.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-09_7befd958cc3f32d86f1eba0969ae72a6_mafia

  • Size

    501KB

  • Sample

    240110-gndcesgcfp

  • MD5

    7befd958cc3f32d86f1eba0969ae72a6

  • SHA1

    2d62ffeeb4548ed26d84c0a4baf69e5ad7bb3d05

  • SHA256

    51d14727dc80c25302716bea566ccd8861718c931942be8715a76ca4eb397a62

  • SHA512

    1fa4fdc62f2f98787cd8d39171625d308979b625b8ebb8d18865942af61a071c39acda35ae883c60ffa6648749304096dbd7aed47d9bfdd9c395df5d9468220f

  • SSDEEP

    6144:pjDI49RbTu85MLG6Nudm6A4uQ2iMbjNP9KJfnGSgP6YGuR7cINe/4dz5C9F+3+Oh:pjDHXe85D6NnNM/ZVuJcIG/Hhs

Score
9/10
evasion

Malware Config

Targets

    • Target

      2024-01-09_7befd958cc3f32d86f1eba0969ae72a6_mafia

    • Size

      501KB

    • MD5

      7befd958cc3f32d86f1eba0969ae72a6

    • SHA1

      2d62ffeeb4548ed26d84c0a4baf69e5ad7bb3d05

    • SHA256

      51d14727dc80c25302716bea566ccd8861718c931942be8715a76ca4eb397a62

    • SHA512

      1fa4fdc62f2f98787cd8d39171625d308979b625b8ebb8d18865942af61a071c39acda35ae883c60ffa6648749304096dbd7aed47d9bfdd9c395df5d9468220f

    • SSDEEP

      6144:pjDI49RbTu85MLG6Nudm6A4uQ2iMbjNP9KJfnGSgP6YGuR7cINe/4dz5C9F+3+Oh:pjDHXe85D6NnNM/ZVuJcIG/Hhs

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks