General

  • Target

    ee4fee92f96dffccf0b79c71984b883c75a4a5bd2ba56e80ebe2ade6cad03d8c

  • Size

    8.6MB

  • Sample

    240505-gfpqgsca34

  • MD5

    153d7b8158ec41bdfd51f28c3bdc7beb

  • SHA1

    a3c4aaba5e2a38e61304694096fb241733a1a7a3

  • SHA256

    ee4fee92f96dffccf0b79c71984b883c75a4a5bd2ba56e80ebe2ade6cad03d8c

  • SHA512

    da55a9daf47325e7069499b9b07d94a8446e389a459dd5cf9b85800265e6cc09bf40297ec7524e441928f6a6dd3494523dbd74798028285474e59a783e9eda14

  • SSDEEP

    98304:mQ3NtEG56WlzLFQQBhkeKMpxsmQ3KU7h5gUgYu:mQ3/EG56WlzLFQQmMpxstK0mUgY

Score
10/10

Malware Config

Targets

    • Target

      ee4fee92f96dffccf0b79c71984b883c75a4a5bd2ba56e80ebe2ade6cad03d8c

    • Size

      8.6MB

    • MD5

      153d7b8158ec41bdfd51f28c3bdc7beb

    • SHA1

      a3c4aaba5e2a38e61304694096fb241733a1a7a3

    • SHA256

      ee4fee92f96dffccf0b79c71984b883c75a4a5bd2ba56e80ebe2ade6cad03d8c

    • SHA512

      da55a9daf47325e7069499b9b07d94a8446e389a459dd5cf9b85800265e6cc09bf40297ec7524e441928f6a6dd3494523dbd74798028285474e59a783e9eda14

    • SSDEEP

      98304:mQ3NtEG56WlzLFQQBhkeKMpxsmQ3KU7h5gUgYu:mQ3/EG56WlzLFQQmMpxstK0mUgY

    Score
    9/10
    • Detects executables packed with ConfuserEx Custom; outside of GIT

    • Detects executables packed with ConfuserEx Mod

    • Detects executables packed with SmartAssembly

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks