Overview

overview

10

Static

static

10

0a950487e1...6d.exe

windows7-x64

9

0a950487e1...6d.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a950487e1e5fdc31fdac297adf226b604568a32517d27c5b80acd45a9c0906d

  • Size

    158KB

  • Sample

    240503-w9p1nsda9t

  • MD5

    a90e18281ce3df17891957a18b82cf0f

  • SHA1

    92934b0d8e313091f3463025fea5359413a982fb

  • SHA256

    0a950487e1e5fdc31fdac297adf226b604568a32517d27c5b80acd45a9c0906d

  • SHA512

    2f4b38183afe1658f92c3a7300890e28f89a54f07354e292ad51f30386a586630fa44eb89c4561513531e6a6b9d69d84f1be3e85641c21639ff33949ca83a67f

  • SSDEEP

    1536:uvUvE3qz4ayX9ioT5Xl8lQWj1vTo5G6kvBzodfjZp4ZDp/naRRXB:PC79l86WqGzIfjZpSDp/naRRR

Score
10/10
persistence

Malware Config

Targets

    • Target

      0a950487e1e5fdc31fdac297adf226b604568a32517d27c5b80acd45a9c0906d

    • Size

      158KB

    • MD5

      a90e18281ce3df17891957a18b82cf0f

    • SHA1

      92934b0d8e313091f3463025fea5359413a982fb

    • SHA256

      0a950487e1e5fdc31fdac297adf226b604568a32517d27c5b80acd45a9c0906d

    • SHA512

      2f4b38183afe1658f92c3a7300890e28f89a54f07354e292ad51f30386a586630fa44eb89c4561513531e6a6b9d69d84f1be3e85641c21639ff33949ca83a67f

    • SSDEEP

      1536:uvUvE3qz4ayX9ioT5Xl8lQWj1vTo5G6kvBzodfjZp4ZDp/naRRXB:PC79l86WqGzIfjZpSDp/naRRR

    Score
    9/10
    persistence

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks