Overview

overview

9

Static

static

1

2024-04-24...ia.exe

windows7-x64

9

2024-04-24...ia.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-24_b16e28f1e1663e38c29d02b9383532b8_mafia

  • Size

    500KB

  • Sample

    240424-eczeeaef4s

  • MD5

    b16e28f1e1663e38c29d02b9383532b8

  • SHA1

    944915c030ca7892517490d6dbb5dbe89b910cd0

  • SHA256

    39a024238794aea66ee477a7b4aabbf0a9aeb22ca75acdd9c7c33e74f710ab72

  • SHA512

    107d3bf945bce804fa17721d7d19bd50fabc826d680a4627969a5512602471814fc6201e638495051dd455c68827a4264541355c011b3f38b360b5e89fd7f33d

  • SSDEEP

    12288:scuA7U+EljXJBh+tli2vklUHM13sfoBjW4i:scuA7U+85BCl/cSHMlsujRi

Score
9/10
evasion

Malware Config

Targets

    • Target

      2024-04-24_b16e28f1e1663e38c29d02b9383532b8_mafia

    • Size

      500KB

    • MD5

      b16e28f1e1663e38c29d02b9383532b8

    • SHA1

      944915c030ca7892517490d6dbb5dbe89b910cd0

    • SHA256

      39a024238794aea66ee477a7b4aabbf0a9aeb22ca75acdd9c7c33e74f710ab72

    • SHA512

      107d3bf945bce804fa17721d7d19bd50fabc826d680a4627969a5512602471814fc6201e638495051dd455c68827a4264541355c011b3f38b360b5e89fd7f33d

    • SSDEEP

      12288:scuA7U+EljXJBh+tli2vklUHM13sfoBjW4i:scuA7U+85BCl/cSHMlsujRi

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks