General

  • Target

    8ebef382d77abaa52c2060fa8963cdaac78a3b3fcb85f11cfdcbf37760c22d3f

  • Size

    168KB

  • Sample

    240424-w9gpasfb38

  • MD5

    102f54b2d2744314042fe8e0fa4423ce

  • SHA1

    9f1f017e62ad610a61d70020320ee4d7d3c61583

  • SHA256

    8ebef382d77abaa52c2060fa8963cdaac78a3b3fcb85f11cfdcbf37760c22d3f

  • SHA512

    1d6e9cb32b37fd31b4108a14138c24e90d7502b652d592b47e03371a0c4c7263028edad291130a682845400bd39a6b1f98f366cc1a402276202b9d3e3a3f3dce

  • SSDEEP

    1536:oxJXH2aHwM7saKGupZ1qG8DAR8bQykqQxuMZztsRoQPgY+5GesH:oxQM7VupZ1BGvBQxufR5

Score
10/10

Malware Config

Targets

    • Target

      8ebef382d77abaa52c2060fa8963cdaac78a3b3fcb85f11cfdcbf37760c22d3f

    • Size

      168KB

    • MD5

      102f54b2d2744314042fe8e0fa4423ce

    • SHA1

      9f1f017e62ad610a61d70020320ee4d7d3c61583

    • SHA256

      8ebef382d77abaa52c2060fa8963cdaac78a3b3fcb85f11cfdcbf37760c22d3f

    • SHA512

      1d6e9cb32b37fd31b4108a14138c24e90d7502b652d592b47e03371a0c4c7263028edad291130a682845400bd39a6b1f98f366cc1a402276202b9d3e3a3f3dce

    • SSDEEP

      1536:oxJXH2aHwM7saKGupZ1qG8DAR8bQykqQxuMZztsRoQPgY+5GesH:oxQM7VupZ1BGvBQxufR5

    Score
    9/10
    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks