Overview

overview

9

Static

static

1

2024-09-19...ia.exe

windows7-x64

9

2024-09-19...ia.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-19_7a74595808e7dac191e1dd04284137e0_mafia

  • Size

    498KB

  • Sample

    240919-hlg39swarf

  • MD5

    7a74595808e7dac191e1dd04284137e0

  • SHA1

    2a2d04587f9023ff307cca51367c48886f087beb

  • SHA256

    6c2cdc7f329d34da3111c786c3c06859753551b99991ac87599cd09f057fc2c7

  • SHA512

    560e4e1e5e27368f35602acc9c9cf0736e59aa31ae428ec784b6f03a7e3b96afcc73df480990ee018b51dac3aa848c58ee5ac98ae2efe061c6a447fb3d1639ad

  • SSDEEP

    6144:4dZaNxXgSjmsfUGiJBXg0zmIMPgPq6Fjdz5CcWQQru0e/VFuuR7htWmcYQX1o5a7:4dc1T7cGi7I53Xr2KuJXqX1TyA

Score
9/10
discoveryevasion

Malware Config

Targets

    • Target

      2024-09-19_7a74595808e7dac191e1dd04284137e0_mafia

    • Size

      498KB

    • MD5

      7a74595808e7dac191e1dd04284137e0

    • SHA1

      2a2d04587f9023ff307cca51367c48886f087beb

    • SHA256

      6c2cdc7f329d34da3111c786c3c06859753551b99991ac87599cd09f057fc2c7

    • SHA512

      560e4e1e5e27368f35602acc9c9cf0736e59aa31ae428ec784b6f03a7e3b96afcc73df480990ee018b51dac3aa848c58ee5ac98ae2efe061c6a447fb3d1639ad

    • SSDEEP

      6144:4dZaNxXgSjmsfUGiJBXg0zmIMPgPq6Fjdz5CcWQQru0e/VFuuR7htWmcYQX1o5a7:4dc1T7cGi7I53Xr2KuJXqX1TyA

    Score
    9/10
    discoveryevasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks