General

  • Target

    4460cdac4096e902795fcf187c63c19cb48d7dbdcb15c0e6892699e1fa6825b0

  • Size

    40KB

  • Sample

    240531-z2jqgaed57

  • MD5

    66b41ea3b2497ccbf32621dc7b94bf3f

  • SHA1

    22c761016687dccb535b8e84967fb2c442c2f141

  • SHA256

    4460cdac4096e902795fcf187c63c19cb48d7dbdcb15c0e6892699e1fa6825b0

  • SHA512

    fb98388153897a022819bd39015bc8cf62c86bb1552c8cd5b2b89c63eeb862eefd8b30a52ad09f500c60724ad2554e2be54bd60053ffe59dc597b69dd64f9123

  • SSDEEP

    768:D1z6aRghBNj999999996cgoYkytbdH4MdxN5HoVGWE9aT7ZLAFZOXoqIb/b18Z:FShP999999996FoYkytbdH4Md7JoISG2

Score
10/10

Malware Config

Targets

    • Target

      4460cdac4096e902795fcf187c63c19cb48d7dbdcb15c0e6892699e1fa6825b0

    • Size

      40KB

    • MD5

      66b41ea3b2497ccbf32621dc7b94bf3f

    • SHA1

      22c761016687dccb535b8e84967fb2c442c2f141

    • SHA256

      4460cdac4096e902795fcf187c63c19cb48d7dbdcb15c0e6892699e1fa6825b0

    • SHA512

      fb98388153897a022819bd39015bc8cf62c86bb1552c8cd5b2b89c63eeb862eefd8b30a52ad09f500c60724ad2554e2be54bd60053ffe59dc597b69dd64f9123

    • SSDEEP

      768:D1z6aRghBNj999999996cgoYkytbdH4MdxN5HoVGWE9aT7ZLAFZOXoqIb/b18Z:FShP999999996FoYkytbdH4Md7JoISG2

    Score
    9/10
    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks