General

  • Target

    Pyro-main.zip

  • Size

    58KB

  • Sample

    240706-sdsvxavajc

  • MD5

    7d0988e82fedca750764bd6b2958fa72

  • SHA1

    f62e48997886f5fd8ff8adc90bce26e700c19e00

  • SHA256

    3e626af3f2d83906d514824b35cb7f5d4c86a64ae2190147cda30f188b35f10b

  • SHA512

    5fac0eb03827ca4894ab6b5821b9c8bc865bf86456d21c54246f317cde28b58ec41cf02b458ca057f6e4334c9287bab91fe910f02e6682dcca8872dae9759cab

  • SSDEEP

    1536:fP6wxc8xEa4g1p7ckeqgEdWcDO1LV6MYS:fLxcMEZaVReqDdWkO1LVqS

Score
7/10
upx

Malware Config

Targets

    • Target

      Pyro-main/Pyro.exe

    • Size

      73KB

    • MD5

      3a978110114305436659087fd8c498da

    • SHA1

      cd4eba4ea334beb23d76a5e269a729bdc0248888

    • SHA256

      03af43d51f0723a1943f578ea772d532c916889eea6cd0c7832ccedf9fcee126

    • SHA512

      fa894725452fbf826853ff8aba769d0c4adb5676f458e03a710e17ab268b04ee3f0e30c5211362abf29d8889f28172e6a7ebfafa92bb6af3e4cc6bf380ea5166

    • SSDEEP

      1536:78gJhX7rgSs9a4g1p7ck0qgEdWcDO1R0Vs9hEhfao:4KhITZaVR0qDdWkO13

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks