Overview

overview

9

Static

static

1

07741d8c92...2N.exe

windows7-x64

9

07741d8c92...2N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    07741d8c9218f716cdc25f9f081d82fecff437b1cc604f543bcaecfae8dd5322N.exe

  • Size

    508KB

  • Sample

    241203-tskzaasqex

  • MD5

    4ba39b5315fbf5a357846db8800244c0

  • SHA1

    3c0d869324c855cc9e2cc54c7a6786cb4516e122

  • SHA256

    07741d8c9218f716cdc25f9f081d82fecff437b1cc604f543bcaecfae8dd5322

  • SHA512

    c657f494346ef63b85eb24b31e2be401c60d45aa1c0ab38a5c4ebd1c920f7a974fc0f1f7fa01fb912b1fec8e4fdce350a0e6c823fb1c31a37bdca0e70ebe33b0

  • SSDEEP

    12288:/y8RUAXZNHvLiW4LJf08YtlCvk1V10f24moBYWdC:/ytAXDHvLiVM1lCcPuf249YOC

Score
9/10
discoveryevasion

Malware Config

Targets

    • Target

      07741d8c9218f716cdc25f9f081d82fecff437b1cc604f543bcaecfae8dd5322N.exe

    • Size

      508KB

    • MD5

      4ba39b5315fbf5a357846db8800244c0

    • SHA1

      3c0d869324c855cc9e2cc54c7a6786cb4516e122

    • SHA256

      07741d8c9218f716cdc25f9f081d82fecff437b1cc604f543bcaecfae8dd5322

    • SHA512

      c657f494346ef63b85eb24b31e2be401c60d45aa1c0ab38a5c4ebd1c920f7a974fc0f1f7fa01fb912b1fec8e4fdce350a0e6c823fb1c31a37bdca0e70ebe33b0

    • SSDEEP

      12288:/y8RUAXZNHvLiW4LJf08YtlCvk1V10f24moBYWdC:/ytAXDHvLiVM1lCcPuf249YOC

    Score
    9/10
    discoveryevasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks