Overview

overview

10

Static

static

10

0bdf099947...26.exe

windows7-x64

9

0bdf099947...26.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0bdf0999475e6c88c97212f21aa51c655b3be722c6f5e899b33c0f86ed685f26

  • Size

    24KB

  • Sample

    240625-w79masycpq

  • MD5

    1ed11cb1914bba9722853fa9226f6d63

  • SHA1

    4a98af6ee72ef9c34afc3434dab568a3dd1388a3

  • SHA256

    0bdf0999475e6c88c97212f21aa51c655b3be722c6f5e899b33c0f86ed685f26

  • SHA512

    df78c296709ab34b4359b39f80e4bdfd115d09e1cf78480046be7fd63722e8c15b7949ff668bc77cd26195de8fedc2e02ea15640078c5b986c51c289a2ff6dc5

  • SSDEEP

    384:xue4QRBnwNhqTBWH7sBmbF7RlEnLYjp0KnjNe1fQuRVmC1he7vvxlL6:xuwrUH7VbF9unMgtXmCe7D6

Score
10/10

Malware Config

Targets

    • Target

      0bdf0999475e6c88c97212f21aa51c655b3be722c6f5e899b33c0f86ed685f26

    • Size

      24KB

    • MD5

      1ed11cb1914bba9722853fa9226f6d63

    • SHA1

      4a98af6ee72ef9c34afc3434dab568a3dd1388a3

    • SHA256

      0bdf0999475e6c88c97212f21aa51c655b3be722c6f5e899b33c0f86ed685f26

    • SHA512

      df78c296709ab34b4359b39f80e4bdfd115d09e1cf78480046be7fd63722e8c15b7949ff668bc77cd26195de8fedc2e02ea15640078c5b986c51c289a2ff6dc5

    • SSDEEP

      384:xue4QRBnwNhqTBWH7sBmbF7RlEnLYjp0KnjNe1fQuRVmC1he7vvxlL6:xuwrUH7VbF9unMgtXmCe7D6

    Score
    9/10

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks