Overview

overview

10

Static

static

10

0d975a46c0...59.exe

windows7-x64

9

0d975a46c0...59.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0d975a46c08dc7940ee1be8ae0778d0e6331d640a94c6209fb087d9a0bf6c459

  • Size

    78KB

  • Sample

    240309-zlzfzshh89

  • MD5

    aa87e8438c79af768632ec332a4590f7

  • SHA1

    437aec47dc788898125d233ec59c93fe42082f55

  • SHA256

    0d975a46c08dc7940ee1be8ae0778d0e6331d640a94c6209fb087d9a0bf6c459

  • SHA512

    9f36cc1d1d947bd88a75e8349a49979df18f58faf7fdaf5e2870d21468926130629a43ae21f30ab508cee86f8d742092ec6c48955d46f82961121e639241101b

  • SSDEEP

    1536:6zfMMkqZPUMRsNFljx5sGOgMsqPhd976zdNE6ecbe1wA2sAVzo:AfMibQPj7Msq5j5cUwAZ4c

Score
10/10

Malware Config

Targets

    • Target

      0d975a46c08dc7940ee1be8ae0778d0e6331d640a94c6209fb087d9a0bf6c459

    • Size

      78KB

    • MD5

      aa87e8438c79af768632ec332a4590f7

    • SHA1

      437aec47dc788898125d233ec59c93fe42082f55

    • SHA256

      0d975a46c08dc7940ee1be8ae0778d0e6331d640a94c6209fb087d9a0bf6c459

    • SHA512

      9f36cc1d1d947bd88a75e8349a49979df18f58faf7fdaf5e2870d21468926130629a43ae21f30ab508cee86f8d742092ec6c48955d46f82961121e639241101b

    • SSDEEP

      1536:6zfMMkqZPUMRsNFljx5sGOgMsqPhd976zdNE6ecbe1wA2sAVzo:AfMibQPj7Msq5j5cUwAZ4c

    Score
    9/10

    • Detects executables built or packed with MPress PE compressor

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks