General

  • Target

    ef55fedfa0dd58c12970175f3318fd726cc472fcbdaa62a6d68dbb6867f34bdf

  • Size

    47KB

  • Sample

    240416-dw88aagb88

  • MD5

    94f2f300924478cd1f263e4286cdd0a1

  • SHA1

    91f554b16095c45364e6f2a7aff7c1fe232da617

  • SHA256

    ef55fedfa0dd58c12970175f3318fd726cc472fcbdaa62a6d68dbb6867f34bdf

  • SHA512

    045d3c4a3fa083b6fdbf50fb4cd414b2baf216c6d257d32336c4370c4371eba16b9cea96173a433f31836b190e07f23cbf859bf547de4e51fc22106adcfc4d4f

  • SSDEEP

    768:JGuGSdMxdKhsttw9o8SHTMfmxA6v9XoGOVcI7QLsIcE4W6Tb:wrxshsnwffmxA6veGOVcI7esIF4WS

Score
10/10

Malware Config

Targets

    • Target

      ef55fedfa0dd58c12970175f3318fd726cc472fcbdaa62a6d68dbb6867f34bdf

    • Size

      47KB

    • MD5

      94f2f300924478cd1f263e4286cdd0a1

    • SHA1

      91f554b16095c45364e6f2a7aff7c1fe232da617

    • SHA256

      ef55fedfa0dd58c12970175f3318fd726cc472fcbdaa62a6d68dbb6867f34bdf

    • SHA512

      045d3c4a3fa083b6fdbf50fb4cd414b2baf216c6d257d32336c4370c4371eba16b9cea96173a433f31836b190e07f23cbf859bf547de4e51fc22106adcfc4d4f

    • SSDEEP

      768:JGuGSdMxdKhsttw9o8SHTMfmxA6v9XoGOVcI7QLsIcE4W6Tb:wrxshsnwffmxA6veGOVcI7esIF4WS

    Score
    9/10
    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks