Overview

overview

10

Static

static

10

115f773b4c...a1.exe

windows7-x64

9

115f773b4c...a1.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    115f773b4ce227b1b7d8f0cfd830269ac8500e2a702aef422ba3739071dc9ca1

  • Size

    83KB

  • Sample

    240517-xe8pzadd25

  • MD5

    b764ad0e34b3ddb47552a85a6546a33a

  • SHA1

    61907f656b448c20734bb16008654f415cb84e86

  • SHA256

    115f773b4ce227b1b7d8f0cfd830269ac8500e2a702aef422ba3739071dc9ca1

  • SHA512

    bc85e2eea9fb9e4e9debbe916f3a3553a4cb048e6ed9cdd69f524e7311a2e8ab40cc7a081d4cf4c1855337c296c69f6c9bf806089e39850ccc2450fd78d895d9

  • SSDEEP

    1536:GzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcon:EfMNE1JG6XMk27EbpOthl0ZUed0on

Score
10/10

Malware Config

Targets

    • Target

      115f773b4ce227b1b7d8f0cfd830269ac8500e2a702aef422ba3739071dc9ca1

    • Size

      83KB

    • MD5

      b764ad0e34b3ddb47552a85a6546a33a

    • SHA1

      61907f656b448c20734bb16008654f415cb84e86

    • SHA256

      115f773b4ce227b1b7d8f0cfd830269ac8500e2a702aef422ba3739071dc9ca1

    • SHA512

      bc85e2eea9fb9e4e9debbe916f3a3553a4cb048e6ed9cdd69f524e7311a2e8ab40cc7a081d4cf4c1855337c296c69f6c9bf806089e39850ccc2450fd78d895d9

    • SSDEEP

      1536:GzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcon:EfMNE1JG6XMk27EbpOthl0ZUed0on

    Score
    9/10

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks