Overview

overview

8

Static

static

1

vac470full...m).zip

windows7-x64

1

vac470full...m).zip

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    vac470full-(www.Patoghu.com).zip

  • Size

    1.3MB

  • Sample

    241001-a8my2axaqg

  • MD5

    c02dce8a0648ca76e83cdae02ce49d3e

  • SHA1

    52be864dbddf9a97b53c7b18f3b77f60c7eeffd7

  • SHA256

    49b02f90ea0305892319a3760ccff6ec2fdebdcdfabba4cc834ef60ccba3f975

  • SHA512

    dfb4e2269fee7d5b5217dd709016b291173a3e3946cb7be0d6d8d143f4fc1ce94e98f99dbcab76952a07a5ed1f7e37d5b31d54e46a6ee5c256e31ec1a5fb2898

  • SSDEEP

    24576:NrqC557IyD2iN0gtsnokjg6K8ntvhgxhhvOCYDjZzdKmssRW:ICMOtgjg6rtJwDmTg

Score
8/10
discovery

Malware Config

Targets

    • Target

      vac470full-(www.Patoghu.com).zip

    • Size

      1.3MB

    • MD5

      c02dce8a0648ca76e83cdae02ce49d3e

    • SHA1

      52be864dbddf9a97b53c7b18f3b77f60c7eeffd7

    • SHA256

      49b02f90ea0305892319a3760ccff6ec2fdebdcdfabba4cc834ef60ccba3f975

    • SHA512

      dfb4e2269fee7d5b5217dd709016b291173a3e3946cb7be0d6d8d143f4fc1ce94e98f99dbcab76952a07a5ed1f7e37d5b31d54e46a6ee5c256e31ec1a5fb2898

    • SSDEEP

      24576:NrqC557IyD2iN0gtsnokjg6K8ntvhgxhhvOCYDjZzdKmssRW:ICMOtgjg6rtJwDmTg

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks