Overview

overview

9

Static

static

1

de5ea9c279...0N.exe

windows7-x64

9

de5ea9c279...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    de5ea9c2791cf3f10b260adfc28303b0N.exe

  • Size

    498KB

  • Sample

    240817-feadqsxhjc

  • MD5

    de5ea9c2791cf3f10b260adfc28303b0

  • SHA1

    0f627a7dff9cef545c113e9e45211e22bb3c5f84

  • SHA256

    5e219d1e91a24780c781a0849d259d965500c6b311e78fcdd97dd3d516e42bab

  • SHA512

    6195e9fb9e38c106ab4607d7d6c02ddadddeab13f7987998e84129446640b648602fab5812038b133e04ccfe448af0e3916b3c1df8601f4dae557a136282a2ee

  • SSDEEP

    12288:QTFERriEKHWHqlha0vW2cSaFOG7WHuJCXZ:QToiEKHWHUaocSaVrkZ

Score
9/10
discoveryevasion

Malware Config

Targets

    • Target

      de5ea9c2791cf3f10b260adfc28303b0N.exe

    • Size

      498KB

    • MD5

      de5ea9c2791cf3f10b260adfc28303b0

    • SHA1

      0f627a7dff9cef545c113e9e45211e22bb3c5f84

    • SHA256

      5e219d1e91a24780c781a0849d259d965500c6b311e78fcdd97dd3d516e42bab

    • SHA512

      6195e9fb9e38c106ab4607d7d6c02ddadddeab13f7987998e84129446640b648602fab5812038b133e04ccfe448af0e3916b3c1df8601f4dae557a136282a2ee

    • SSDEEP

      12288:QTFERriEKHWHqlha0vW2cSaFOG7WHuJCXZ:QToiEKHWHUaocSaVrkZ

    Score
    9/10
    discoveryevasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks