Overview

overview

10

Static

static

10

d7c59c74ba...90.exe

windows7-x64

9

d7c59c74ba...90.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    d7c59c74ba84bfedbbbfe71e60d54ba8bb884396d0d5639c7edba430b1e07c90

  • Size

    31KB

  • Sample

    240314-3xq6jabb2z

  • MD5

    56c4152d715838d3e462657bc89ec371

  • SHA1

    d219c148e958097bb834edfd192f65663d579483

  • SHA256

    d7c59c74ba84bfedbbbfe71e60d54ba8bb884396d0d5639c7edba430b1e07c90

  • SHA512

    00c9a94eee60db4e84f37e31a528709d99df8dae3e42e26d602ffe647e9be017113196e0f24dea579d67d47e4a96878b159b16289741fb8f4c5dcd1c5fe24e73

  • SSDEEP

    768:W67xaGjAer7gy4QMcZJpeBHgf8nR5N7ANTJ7Z2J:Mer8yj3WHJnqNTJ12

Score
10/10

Malware Config

Targets

    • Target

      d7c59c74ba84bfedbbbfe71e60d54ba8bb884396d0d5639c7edba430b1e07c90

    • Size

      31KB

    • MD5

      56c4152d715838d3e462657bc89ec371

    • SHA1

      d219c148e958097bb834edfd192f65663d579483

    • SHA256

      d7c59c74ba84bfedbbbfe71e60d54ba8bb884396d0d5639c7edba430b1e07c90

    • SHA512

      00c9a94eee60db4e84f37e31a528709d99df8dae3e42e26d602ffe647e9be017113196e0f24dea579d67d47e4a96878b159b16289741fb8f4c5dcd1c5fe24e73

    • SSDEEP

      768:W67xaGjAer7gy4QMcZJpeBHgf8nR5N7ANTJ7Z2J:Mer8yj3WHJnqNTJ12

    Score
    9/10

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks