Overview

overview

9

Static

static

1

b99ae5db83...0N.exe

windows7-x64

9

b99ae5db83...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    b99ae5db836d6369b16d9ac12471a830N.exe

  • Size

    494KB

  • Sample

    240727-my39gswarj

  • MD5

    b99ae5db836d6369b16d9ac12471a830

  • SHA1

    28f01b5d7527065dcf5b712683e4f42a96c631f1

  • SHA256

    9f0a7e3272cb517731a704e15a72745a03f5cf9ef21c2d1bad49dd75b69eafdd

  • SHA512

    f7e2abf96a381438e9f07b9a2ce007efec58d632ee586473eb33e0132f764ad2b6999f5825391c1d7cceef69a920e86cd62949815e01883641f36818305309c9

  • SSDEEP

    12288:a3ma4bE/SPQHqkdTvL7Ff456p9HKuJC7e:a3b4bEiFCVMaX4e

Score
9/10
discoveryevasion

Malware Config

Targets

    • Target

      b99ae5db836d6369b16d9ac12471a830N.exe

    • Size

      494KB

    • MD5

      b99ae5db836d6369b16d9ac12471a830

    • SHA1

      28f01b5d7527065dcf5b712683e4f42a96c631f1

    • SHA256

      9f0a7e3272cb517731a704e15a72745a03f5cf9ef21c2d1bad49dd75b69eafdd

    • SHA512

      f7e2abf96a381438e9f07b9a2ce007efec58d632ee586473eb33e0132f764ad2b6999f5825391c1d7cceef69a920e86cd62949815e01883641f36818305309c9

    • SSDEEP

      12288:a3ma4bE/SPQHqkdTvL7Ff456p9HKuJC7e:a3b4bEiFCVMaX4e

    Score
    9/10
    discoveryevasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks