Overview

overview

10

Static

static

10

b78bd121b5...dc.exe

windows7-x64

9

b78bd121b5...dc.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b78bd121b560747e9c011caa323e7de89cf59c3549134ccf5b64a6a8cb3737dc

  • Size

    47KB

  • Sample

    240326-3x6wzsfb58

  • MD5

    78538d4e82dce70ccbc295b7be83e221

  • SHA1

    02c6cc706bd1be626a731fc44621130da5bc79b7

  • SHA256

    b78bd121b560747e9c011caa323e7de89cf59c3549134ccf5b64a6a8cb3737dc

  • SHA512

    292760d7fa02dc6b9d6b084081e65fed4ef7f958fb308340e6b953ae5a2daeed933b2ca8005114109fca449b6d35b6e7886f16d23c43c4225b1aaf400f21056b

  • SSDEEP

    384:pvr/G9K/aASCjr8bfCmIyCl/wI0/KYNRYpIfjkzgCWBlqYreP2Bk4SNu0ext+xIU:RzG9lCapIyMsDlfjQelqYreP23SUxUIU

Score
10/10

Malware Config

Targets

    • Target

      b78bd121b560747e9c011caa323e7de89cf59c3549134ccf5b64a6a8cb3737dc

    • Size

      47KB

    • MD5

      78538d4e82dce70ccbc295b7be83e221

    • SHA1

      02c6cc706bd1be626a731fc44621130da5bc79b7

    • SHA256

      b78bd121b560747e9c011caa323e7de89cf59c3549134ccf5b64a6a8cb3737dc

    • SHA512

      292760d7fa02dc6b9d6b084081e65fed4ef7f958fb308340e6b953ae5a2daeed933b2ca8005114109fca449b6d35b6e7886f16d23c43c4225b1aaf400f21056b

    • SSDEEP

      384:pvr/G9K/aASCjr8bfCmIyCl/wI0/KYNRYpIfjkzgCWBlqYreP2Bk4SNu0ext+xIU:RzG9lCapIyMsDlfjQelqYreP23SUxUIU

    Score
    9/10

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks