Overview

overview

9

Static

static

1

8d2c3399e5...0N.exe

windows7-x64

9

8d2c3399e5...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d2c3399e54a887cdd06daef2befca50N.exe

  • Size

    498KB

  • Sample

    240727-eh3zsayfkc

  • MD5

    8d2c3399e54a887cdd06daef2befca50

  • SHA1

    f010ced914b6582089c094f6f451d2908776bea2

  • SHA256

    6ee1623c76030589e8b3080314913aee8c2596227d8874abf469527ad3ae5fc3

  • SHA512

    19c3c767c6912b8e8e75ee48b09d6725af64aa03235b4dc596fbd8f8d178c57efbe168833075a54e89ac3bcb587b875dfb8fccc0021fc8e11ed5e1c2c932869e

  • SSDEEP

    6144:3n4bly8sbRD3AHcRkpOrA0vWmJ/N0zmIMc+UftOyPoFjdz5C49PS3DRXQ20efxuO:3nYgBND3AHc2pn0vW46jBFOujjxuJCmM

Score
9/10
discoveryevasion

Malware Config

Targets

    • Target

      8d2c3399e54a887cdd06daef2befca50N.exe

    • Size

      498KB

    • MD5

      8d2c3399e54a887cdd06daef2befca50

    • SHA1

      f010ced914b6582089c094f6f451d2908776bea2

    • SHA256

      6ee1623c76030589e8b3080314913aee8c2596227d8874abf469527ad3ae5fc3

    • SHA512

      19c3c767c6912b8e8e75ee48b09d6725af64aa03235b4dc596fbd8f8d178c57efbe168833075a54e89ac3bcb587b875dfb8fccc0021fc8e11ed5e1c2c932869e

    • SSDEEP

      6144:3n4bly8sbRD3AHcRkpOrA0vWmJ/N0zmIMc+UftOyPoFjdz5C49PS3DRXQ20efxuO:3nYgBND3AHc2pn0vW46jBFOujjxuJCmM

    Score
    9/10
    discoveryevasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks