Overview

overview

9

Static

static

1

a7ced57d7c...0N.exe

windows7-x64

9

a7ced57d7c...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    a7ced57d7c42fb2002a9788cdb823f20N.exe

  • Size

    495KB

  • Sample

    240722-nnr9xaweln

  • MD5

    a7ced57d7c42fb2002a9788cdb823f20

  • SHA1

    6e20657124c2b18833c925dfeffe0c37032f07f6

  • SHA256

    064652499494eca77cfd5892d76505e74257bbc1e3291d16f627a13835634e12

  • SHA512

    dc732d218bfd47c1f41b32b43d71e75e0f6fa9ac5d7cbbc0dcf0686cb7321c5eb54b33625cfdb243f2cb316e42afa7487102198220fe0dac970f8bdb270b72dd

  • SSDEEP

    12288:7tdPs2vQzUhRVwDnlO2WkbxeyiGE39moBdWs8Q:7tdPs2vQzW2R/wyiJ99d78Q

Score
9/10
evasion

Malware Config

Targets

    • Target

      a7ced57d7c42fb2002a9788cdb823f20N.exe

    • Size

      495KB

    • MD5

      a7ced57d7c42fb2002a9788cdb823f20

    • SHA1

      6e20657124c2b18833c925dfeffe0c37032f07f6

    • SHA256

      064652499494eca77cfd5892d76505e74257bbc1e3291d16f627a13835634e12

    • SHA512

      dc732d218bfd47c1f41b32b43d71e75e0f6fa9ac5d7cbbc0dcf0686cb7321c5eb54b33625cfdb243f2cb316e42afa7487102198220fe0dac970f8bdb270b72dd

    • SSDEEP

      12288:7tdPs2vQzUhRVwDnlO2WkbxeyiGE39moBdWs8Q:7tdPs2vQzW2R/wyiJ99d78Q

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks