General

  • Target
    3d9d0db979e813cb2a509f5d047dad7e4f0bf6e17b666e499fe998480651cfe6
  • Size 538KB
  • Sample260830-2gzmastva1
  • SHA256 3d9d0db979e813cb2a509f5d047dad7e4f0bf6e17b666e499fe998480651cfe6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      3d9d0db979e813cb2a509f5d047dad7e4f0bf6e17b666e499fe998480651cfe6
    • Size 538KB
    • SHA256 3d9d0db979e813cb2a509f5d047dad7e4f0bf6e17b666e499fe998480651cfe6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks