General

  • Target

    773fe664e1198b1c714819fcf7381fae3fb0a6fc342d8dd1c76a21bd426eeeee

  • Size

    14.6MB

  • Sample

    240524-d5klaabe7x

  • MD5

    fe68426c101539218495386138e7ac48

  • SHA1

    f3f3e88d6ea0b43976d4878c7c36438106e1fbc7

  • SHA256

    773fe664e1198b1c714819fcf7381fae3fb0a6fc342d8dd1c76a21bd426eeeee

  • SHA512

    683b1d91b900632d7d762a99a11d9ead335567e6037e758633dd86027bc4bf657b0d142cc11f6be44b2f52d80114201d37c4d811bc1854921fc4acd2bc6a3d8e

  • SSDEEP

    196608:QNym2iBYGfsV3zP/wYekZ1oKnMK6kJHqPbVruhmR/SACkCkyhXQ6ldGsTQN7pDzh:QN4H3/Jzn8EYpvCEzy

Score
9/10

Malware Config

Targets

    • Target

      773fe664e1198b1c714819fcf7381fae3fb0a6fc342d8dd1c76a21bd426eeeee

    • Size

      14.6MB

    • MD5

      fe68426c101539218495386138e7ac48

    • SHA1

      f3f3e88d6ea0b43976d4878c7c36438106e1fbc7

    • SHA256

      773fe664e1198b1c714819fcf7381fae3fb0a6fc342d8dd1c76a21bd426eeeee

    • SHA512

      683b1d91b900632d7d762a99a11d9ead335567e6037e758633dd86027bc4bf657b0d142cc11f6be44b2f52d80114201d37c4d811bc1854921fc4acd2bc6a3d8e

    • SSDEEP

      196608:QNym2iBYGfsV3zP/wYekZ1oKnMK6kJHqPbVruhmR/SACkCkyhXQ6ldGsTQN7pDzh:QN4H3/Jzn8EYpvCEzy

    Score
    9/10
    • Looks for VirtualBox Guest Additions in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Discovery

Query Registry

2
T1012

Virtualization/Sandbox Evasion

1
T1497

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Tasks