General

  • Target

    0c9823a4b1bbb16622a9ccc887eb9e29efb5926af48f337a2dddee80c15a8e85

  • Size

    90KB

  • Sample

    240524-xbl2ssfa4w

  • MD5

    511e350e7a4d2e1139860c0a35257bd7

  • SHA1

    5276568027644679e28f95d795e9f690b9a7299d

  • SHA256

    0c9823a4b1bbb16622a9ccc887eb9e29efb5926af48f337a2dddee80c15a8e85

  • SHA512

    3ffbd7f78506a446c4764b8941848afb606b955569f92c1535a4f61c276ba06c45da2937b2af1c2f373ddf17a6ec07dc073144eed1581136043d3fde8f078c33

  • SSDEEP

    1536:gzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcS:mfMNE1JG6XMk27EbpOthl0ZUed0S

Score
10/10

Malware Config

Targets

    • Target

      0c9823a4b1bbb16622a9ccc887eb9e29efb5926af48f337a2dddee80c15a8e85

    • Size

      90KB

    • MD5

      511e350e7a4d2e1139860c0a35257bd7

    • SHA1

      5276568027644679e28f95d795e9f690b9a7299d

    • SHA256

      0c9823a4b1bbb16622a9ccc887eb9e29efb5926af48f337a2dddee80c15a8e85

    • SHA512

      3ffbd7f78506a446c4764b8941848afb606b955569f92c1535a4f61c276ba06c45da2937b2af1c2f373ddf17a6ec07dc073144eed1581136043d3fde8f078c33

    • SSDEEP

      1536:gzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcS:mfMNE1JG6XMk27EbpOthl0ZUed0S

    Score
    9/10
    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks