General

  • Target

    34f10e92d518d6cb3ec161398bd2d33f0f07f843957c8d140420cd24fd34bc9e

  • Size

    102KB

  • Sample

    240306-xj3drafe56

  • MD5

    c0d7dd28a26aaa8ca16801646ea5f7a5

  • SHA1

    337df94758b2b31e0c79dbafcc4c09c1cdcd69d9

  • SHA256

    34f10e92d518d6cb3ec161398bd2d33f0f07f843957c8d140420cd24fd34bc9e

  • SHA512

    fae1db6bdadcd6aa48c3289a04ea42776a1b786d48eee4202a57309beaa9efe10da5d177a77af571d0a5551aafc544f0dd7ec33126593278ea5de6f8ef45e30d

  • SSDEEP

    1536:NB+FC9RntfWeoGiPyCHjKDjfQQQtUetDdlNoJL0Brwdoa:NB+F8tfPN4yCDKDjfQQQt2

Score
9/10

Malware Config

Targets

    • Target

      34f10e92d518d6cb3ec161398bd2d33f0f07f843957c8d140420cd24fd34bc9e

    • Size

      102KB

    • MD5

      c0d7dd28a26aaa8ca16801646ea5f7a5

    • SHA1

      337df94758b2b31e0c79dbafcc4c09c1cdcd69d9

    • SHA256

      34f10e92d518d6cb3ec161398bd2d33f0f07f843957c8d140420cd24fd34bc9e

    • SHA512

      fae1db6bdadcd6aa48c3289a04ea42776a1b786d48eee4202a57309beaa9efe10da5d177a77af571d0a5551aafc544f0dd7ec33126593278ea5de6f8ef45e30d

    • SSDEEP

      1536:NB+FC9RntfWeoGiPyCHjKDjfQQQtUetDdlNoJL0Brwdoa:NB+F8tfPN4yCDKDjfQQQt2

    Score
    9/10
    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks