Overview

overview

9

Static

static

1

8cfe883c8c...0N.exe

windows7-x64

9

8cfe883c8c...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8cfe883c8cbc1e2e6fac56a8b8497c30N.exe

  • Size

    499KB

  • Sample

    240722-k1zyqsygjc

  • MD5

    8cfe883c8cbc1e2e6fac56a8b8497c30

  • SHA1

    7c0ff78264f83377b2541fa0e8c1c6a13113d3bb

  • SHA256

    bb50093c968e85f940c507d683717c68a447641529e18dd1b265495124fc2f6d

  • SHA512

    a3a732f43ecf908e43ada5e71a51eef690e810d56f4c80f0abd10cfa019d22156796f6220fabcd7b4b1daaa556ec8e10fccc0f2e86703e668808910fbd20a667

  • SSDEEP

    12288:YHgG1q+g6a5U9TFUvk4UDC1mVV1cloBjWeZs:YHgG1q+C5Ugc/GAVzcQjxy

Score
9/10
evasion

Malware Config

Targets

    • Target

      8cfe883c8cbc1e2e6fac56a8b8497c30N.exe

    • Size

      499KB

    • MD5

      8cfe883c8cbc1e2e6fac56a8b8497c30

    • SHA1

      7c0ff78264f83377b2541fa0e8c1c6a13113d3bb

    • SHA256

      bb50093c968e85f940c507d683717c68a447641529e18dd1b265495124fc2f6d

    • SHA512

      a3a732f43ecf908e43ada5e71a51eef690e810d56f4c80f0abd10cfa019d22156796f6220fabcd7b4b1daaa556ec8e10fccc0f2e86703e668808910fbd20a667

    • SSDEEP

      12288:YHgG1q+g6a5U9TFUvk4UDC1mVV1cloBjWeZs:YHgG1q+C5Ugc/GAVzcQjxy

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks