Overview

overview

10

Static

static

10

0c103035ca...58.exe

windows7-x64

9

0c103035ca...58.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0c103035ca155e013ba6ee7dd3fc80f82ae06065ec8f9c6e83c9466445110058

  • Size

    540KB

  • Sample

    240604-w8tbpsff5v

  • MD5

    ae4c75febf12c4603da3854c4620be94

  • SHA1

    9686462a552844283378905a46f06c2ef6943cb8

  • SHA256

    0c103035ca155e013ba6ee7dd3fc80f82ae06065ec8f9c6e83c9466445110058

  • SHA512

    920edaa085501faeb2dd5d30438a28a99c65503a3f47487d9a993b4529dd4ff3becbbc07fcbbe0ca18467961f3027422e05fcf11c5e738d3c19210c74bf55d07

  • SSDEEP

    3072:ZCaoAs101Pol0xPTM7mRCAdJSSxPUkl3V4Vh1q+MQTCk/dN92sdNhavtrVdewnAp:ZqDAwl0xPTMiR9JSSxPUKuqododHYh

Score
10/10

Malware Config

Targets

    • Target

      0c103035ca155e013ba6ee7dd3fc80f82ae06065ec8f9c6e83c9466445110058

    • Size

      540KB

    • MD5

      ae4c75febf12c4603da3854c4620be94

    • SHA1

      9686462a552844283378905a46f06c2ef6943cb8

    • SHA256

      0c103035ca155e013ba6ee7dd3fc80f82ae06065ec8f9c6e83c9466445110058

    • SHA512

      920edaa085501faeb2dd5d30438a28a99c65503a3f47487d9a993b4529dd4ff3becbbc07fcbbe0ca18467961f3027422e05fcf11c5e738d3c19210c74bf55d07

    • SSDEEP

      3072:ZCaoAs101Pol0xPTM7mRCAdJSSxPUkl3V4Vh1q+MQTCk/dN92sdNhavtrVdewnAp:ZqDAwl0xPTMiR9JSSxPUKuqododHYh

    Score
    9/10

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks