Overview

overview

9

Static

static

1

2024-09-19...ia.exe

windows7-x64

9

2024-09-19...ia.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-19_da022312a13063cda5350c8e98097eae_mafia

  • Size

    495KB

  • Sample

    240919-hmepjawbme

  • MD5

    da022312a13063cda5350c8e98097eae

  • SHA1

    289a4d18404d89a51e36ca98483cb8ccb803c4c9

  • SHA256

    28734d070a2395894adf686baf82e3833eb2aa06738245d832a10fdb48b0f17b

  • SHA512

    004210c56346d1288a0047c7589545296f62e5859254c4c9ab1384e9c7297c300849a4a05738f42cc0830cfe6dec8de32dde0309c1d3ba1e304ef9b76006f854

  • SSDEEP

    12288:ZsIdx5HmzS3zcJrVb4rvkSlQr1wVAvoBjWuH9:ZsIdx5HmzY4R2cSl+GVA+jTH9

Score
9/10
discoveryevasion

Malware Config

Targets

    • Target

      2024-09-19_da022312a13063cda5350c8e98097eae_mafia

    • Size

      495KB

    • MD5

      da022312a13063cda5350c8e98097eae

    • SHA1

      289a4d18404d89a51e36ca98483cb8ccb803c4c9

    • SHA256

      28734d070a2395894adf686baf82e3833eb2aa06738245d832a10fdb48b0f17b

    • SHA512

      004210c56346d1288a0047c7589545296f62e5859254c4c9ab1384e9c7297c300849a4a05738f42cc0830cfe6dec8de32dde0309c1d3ba1e304ef9b76006f854

    • SSDEEP

      12288:ZsIdx5HmzS3zcJrVb4rvkSlQr1wVAvoBjWuH9:ZsIdx5HmzY4R2cSl+GVA+jTH9

    Score
    9/10
    discoveryevasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks