General

  • Target

    a62c4762cba4cd4e37aeaef9e34393949d36801f93c70193f3f164a22c23e95e

  • Size

    550KB

  • Sample

    240429-a34plade7x

  • MD5

    8afc759543d3707d539434841bd857cd

  • SHA1

    857fb0d855c8314cb8beadbd9c2d92444d20d1ff

  • SHA256

    a62c4762cba4cd4e37aeaef9e34393949d36801f93c70193f3f164a22c23e95e

  • SHA512

    7e12f84a1f5b6f5ba54207819542c400feb066c0c58b6c3eca25f49f22fd7103e25cb051eab0fbfc9ae26024d4b9bef810ac87ae389334cf95dbd043a756711a

  • SSDEEP

    3072:XCaoAs101Pol0xPTM7mRCAdJSSxPUkl3V4Vh1q+MQTCk/dN92sdNhavtrVdewnAg:XqDAwl0xPTMiR9JSSxPUKuqododHYo

Score
10/10

Malware Config

Targets

    • Target

      a62c4762cba4cd4e37aeaef9e34393949d36801f93c70193f3f164a22c23e95e

    • Size

      550KB

    • MD5

      8afc759543d3707d539434841bd857cd

    • SHA1

      857fb0d855c8314cb8beadbd9c2d92444d20d1ff

    • SHA256

      a62c4762cba4cd4e37aeaef9e34393949d36801f93c70193f3f164a22c23e95e

    • SHA512

      7e12f84a1f5b6f5ba54207819542c400feb066c0c58b6c3eca25f49f22fd7103e25cb051eab0fbfc9ae26024d4b9bef810ac87ae389334cf95dbd043a756711a

    • SSDEEP

      3072:XCaoAs101Pol0xPTM7mRCAdJSSxPUkl3V4Vh1q+MQTCk/dN92sdNhavtrVdewnAg:XqDAwl0xPTMiR9JSSxPUKuqododHYo

    Score
    9/10
    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks