General
- Target 3d9d0db979e813cb2a509f5d047dad7e4f0bf6e17b666e499fe998480651cfe6
- Size 538KB
- Sample260830-2gzmastva1
- SHA256 3d9d0db979e813cb2a509f5d047dad7e4f0bf6e17b666e499fe998480651cfe6
- MD5 2a50fcbe7ec7727a52a3142be2c02df2
- SHA1 483ec3880e370b0b3addca419155a9a2034a720a
- SHA512 7196bbe388b0c39690cbb5e7f38198179dcc0df127605916676d48b2c060c95aa3d9cf06f812c74c2d5f1f7e54339192844847e30c15819da960d83f687dec52
- SSDEEP 12288:KnZTnRX2FXF4TAN0D/rdJNadLzyk9dx5ZLZ5UIqF8PvqrDOY7:Kn7u4Tw0nElWk9dxjLHUIq+U3
- TLSH T132C40222B5D1CC75C5B30DF148E1A6355A7DFD3229B08A0773883BC53573291AA3E7AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3d9d0db979e813cb2a509f5d047dad7e4f0bf6e17b666e499fe998480651cfe6.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 3d9d0db979e813cb2a509f5d047dad7e4f0bf6e17b666e499fe998480651cfe6
- Size 538KB
- SHA256 3d9d0db979e813cb2a509f5d047dad7e4f0bf6e17b666e499fe998480651cfe6
- MD5 2a50fcbe7ec7727a52a3142be2c02df2
- SHA1 483ec3880e370b0b3addca419155a9a2034a720a
- SHA512 7196bbe388b0c39690cbb5e7f38198179dcc0df127605916676d48b2c060c95aa3d9cf06f812c74c2d5f1f7e54339192844847e30c15819da960d83f687dec52
- SSDEEP 12288:KnZTnRX2FXF4TAN0D/rdJNadLzyk9dx5ZLZ5UIqF8PvqrDOY7:Kn7u4Tw0nElWk9dxjLHUIq+U3
- TLSH T132C40222B5D1CC75C5B30DF148E1A6355A7DFD3229B08A0773883BC53573291AA3E7AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Virtualization/Sandbox Evasion
1