Overview

overview

9

Static

static

1

001647b365...0N.exe

windows7-x64

9

001647b365...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    001647b365780e2c57e7eb1b9f95aac0N.exe

  • Size

    500KB

  • Sample

    240806-y1lm1ashkc

  • MD5

    001647b365780e2c57e7eb1b9f95aac0

  • SHA1

    605f0c127109674f43494984876f581420892351

  • SHA256

    b23b2b5834f56a920619c5278cc80c5331e287e3274200af10423f379e31abf2

  • SHA512

    5789b5f607110383c55c336908090c37973e54c3f72ac599b1e88207a5e1c8a5b3e5a1f4e9472ed8b076d7723c02931380ba63155f96a2b5b0c3c896f9420ff6

  • SSDEEP

    12288:ccuA7U+EljXJBh+tli2vklUHM13sfoBjW4i:ccuA7U+85BCl/cSHMlsujRi

Score
9/10
discoveryevasion

Malware Config

Targets

    • Target

      001647b365780e2c57e7eb1b9f95aac0N.exe

    • Size

      500KB

    • MD5

      001647b365780e2c57e7eb1b9f95aac0

    • SHA1

      605f0c127109674f43494984876f581420892351

    • SHA256

      b23b2b5834f56a920619c5278cc80c5331e287e3274200af10423f379e31abf2

    • SHA512

      5789b5f607110383c55c336908090c37973e54c3f72ac599b1e88207a5e1c8a5b3e5a1f4e9472ed8b076d7723c02931380ba63155f96a2b5b0c3c896f9420ff6

    • SSDEEP

      12288:ccuA7U+EljXJBh+tli2vklUHM13sfoBjW4i:ccuA7U+85BCl/cSHMlsujRi

    Score
    9/10
    discoveryevasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks