Overview

overview

9

Static

static

1

2024-03-09...ia.exe

windows7-x64

9

2024-03-09...ia.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-09_7090d8513956c85c1ddb5f7d32c95681_mafia

  • Size

    500KB

  • Sample

    240309-lha3bsfe2z

  • MD5

    7090d8513956c85c1ddb5f7d32c95681

  • SHA1

    4a69b32f985f3b4899cd0770039ae74e57c03c83

  • SHA256

    03f096f38bed12291fe42d4af23c08373c145259fd5be8671f410d62de5117ed

  • SHA512

    050a20ca975fac6113545fb07e71d260c6dcec0d420fca7bd936c8a5e6913831391282964286a46a26d6526e9abb190805edd927520857eb8609d8bcf7a9b3cb

  • SSDEEP

    6144:75DK99xOtO8XMLOjyfdGdQK36OP9KEzmIr3JgYhCOPoKuRbdz5C241cOInPfnGfA:75Dc3x8XPjy07n1C4uASOIP/s4

Score
9/10
evasion

Malware Config

Targets

    • Target

      2024-03-09_7090d8513956c85c1ddb5f7d32c95681_mafia

    • Size

      500KB

    • MD5

      7090d8513956c85c1ddb5f7d32c95681

    • SHA1

      4a69b32f985f3b4899cd0770039ae74e57c03c83

    • SHA256

      03f096f38bed12291fe42d4af23c08373c145259fd5be8671f410d62de5117ed

    • SHA512

      050a20ca975fac6113545fb07e71d260c6dcec0d420fca7bd936c8a5e6913831391282964286a46a26d6526e9abb190805edd927520857eb8609d8bcf7a9b3cb

    • SSDEEP

      6144:75DK99xOtO8XMLOjyfdGdQK36OP9KEzmIr3JgYhCOPoKuRbdz5C241cOInPfnGfA:75Dc3x8XPjy07n1C4uASOIP/s4

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks