General

  • Target

    Imperium Loader.exe

  • Size

    263KB

  • Sample

    240410-v5xpaaab6s

  • MD5

    5ec21624882cddf66dc3d41ae6c3d570

  • SHA1

    5635706a00d75dba01fe5921af462a82cf9a82c5

  • SHA256

    98cdc348d94f6480907f9fd976ef93bad30b86680bbdac73c98e3ce0c0707336

  • SHA512

    0eeb269b2b798a5905064b2d572057c2b8b57695dbeb16f5061e0b927865384790cddf6de8e04e89551963e067b8c524949b8c4450193bd1300a187df9dc583d

  • SSDEEP

    1536:5GuTKnouy8cD9RQdDuHblTbf2LlnTRd51ivPQoDESLQ4LQW0/hK+QXTmWF2rwpiN:nOoutm1qTdrO2roiJUZbWIFGpMYykTu

Score
7/10
upx

Malware Config

Targets

    • Target

      Imperium Loader.exe

    • Size

      263KB

    • MD5

      5ec21624882cddf66dc3d41ae6c3d570

    • SHA1

      5635706a00d75dba01fe5921af462a82cf9a82c5

    • SHA256

      98cdc348d94f6480907f9fd976ef93bad30b86680bbdac73c98e3ce0c0707336

    • SHA512

      0eeb269b2b798a5905064b2d572057c2b8b57695dbeb16f5061e0b927865384790cddf6de8e04e89551963e067b8c524949b8c4450193bd1300a187df9dc583d

    • SSDEEP

      1536:5GuTKnouy8cD9RQdDuHblTbf2LlnTRd51ivPQoDESLQ4LQW0/hK+QXTmWF2rwpiN:nOoutm1qTdrO2roiJUZbWIFGpMYykTu

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks