General

  • Target

    482f2e39638de035efbcb880def9245a426857db16af6499da5eef477f0c8d1e

  • Size

    96KB

  • Sample

    240422-1e88aagf9x

  • MD5

    e38950aa9843f107a664373c2e2ab43b

  • SHA1

    fe15a70ac6dbea427107f39870cd9da5c00d7fc3

  • SHA256

    482f2e39638de035efbcb880def9245a426857db16af6499da5eef477f0c8d1e

  • SHA512

    090cc7afa5f68eb9b3539cffb88f605f4377fbf0503ae1a94f6d5017f033fa03424f99d1bb353ad4ce52538969def54620ce03ad7eb8481b986549710135565f

  • SSDEEP

    1536:GzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcUFL:EfMNE1JG6XMk27EbpOthl0ZUed0Ut

Score
10/10

Malware Config

Targets

    • Target

      482f2e39638de035efbcb880def9245a426857db16af6499da5eef477f0c8d1e

    • Size

      96KB

    • MD5

      e38950aa9843f107a664373c2e2ab43b

    • SHA1

      fe15a70ac6dbea427107f39870cd9da5c00d7fc3

    • SHA256

      482f2e39638de035efbcb880def9245a426857db16af6499da5eef477f0c8d1e

    • SHA512

      090cc7afa5f68eb9b3539cffb88f605f4377fbf0503ae1a94f6d5017f033fa03424f99d1bb353ad4ce52538969def54620ce03ad7eb8481b986549710135565f

    • SSDEEP

      1536:GzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcUFL:EfMNE1JG6XMk27EbpOthl0ZUed0Ut

    Score
    9/10
    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks