Overview

overview

9

Static

static

1

0659298a54...0N.exe

windows7-x64

9

0659298a54...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0659298a54d84690d0ecf923f2503ec0N.exe

  • Size

    493KB

  • Sample

    240801-1e6r6axarl

  • MD5

    0659298a54d84690d0ecf923f2503ec0

  • SHA1

    1d575c84193f5fa126f89cd7f33ebf9095e7c938

  • SHA256

    1a5656db61d8652946ae0a2e2cff8e0dba77f82d971c1663dae7dfa80eace094

  • SHA512

    e6b6ba09afae365c012885383b2d6dfe566d06e58d97f5df1362dfb9026ce14f58fcaad11cb75d3ee2a5771b24a26342e0cb124770c1bf62a2ae1fa52c346943

  • SSDEEP

    12288:0B+RDcOLH4fpWXNVLtUboZ2vk0u0V532JhU1wr4BjWmDt:0BQcOLH4fwecj42JhfWj5B

Score
9/10
discoveryevasion

Malware Config

Targets

    • Target

      0659298a54d84690d0ecf923f2503ec0N.exe

    • Size

      493KB

    • MD5

      0659298a54d84690d0ecf923f2503ec0

    • SHA1

      1d575c84193f5fa126f89cd7f33ebf9095e7c938

    • SHA256

      1a5656db61d8652946ae0a2e2cff8e0dba77f82d971c1663dae7dfa80eace094

    • SHA512

      e6b6ba09afae365c012885383b2d6dfe566d06e58d97f5df1362dfb9026ce14f58fcaad11cb75d3ee2a5771b24a26342e0cb124770c1bf62a2ae1fa52c346943

    • SSDEEP

      12288:0B+RDcOLH4fpWXNVLtUboZ2vk0u0V532JhU1wr4BjWmDt:0BQcOLH4fwecj42JhfWj5B

    Score
    9/10
    discoveryevasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks