General

  • Target

    Impossible.exe

  • Size

    9KB

  • Sample

    240909-2g155atemj

  • MD5

    8da1df08c3ab2e08c0bb87db588c66f6

  • SHA1

    0f2f8b063681e177b76a6095b0bd8ce9ff2e22ae

  • SHA256

    4197b1c37e1d7ccb4faeb4abf390d17010122f4254b9836a100c527f750c5f98

  • SHA512

    91f4f81cd3620fd125a3f60ee7eacbd4d7ef875e94a6431edb20d9af6e5d6f2952760bd454cb5ce959fdab1046e2750fd23b1d9543a931ab721277eda91c4b0a

  • SSDEEP

    192:go0m88aHVua5rD5sUiaFaNJhLkwcud2DH9VwGfct1S:T0m1a5pE+aNJawcudoD7UO

Score
7/10

Malware Config

Targets

    • Target

      Impossible.exe

    • Size

      9KB

    • MD5

      8da1df08c3ab2e08c0bb87db588c66f6

    • SHA1

      0f2f8b063681e177b76a6095b0bd8ce9ff2e22ae

    • SHA256

      4197b1c37e1d7ccb4faeb4abf390d17010122f4254b9836a100c527f750c5f98

    • SHA512

      91f4f81cd3620fd125a3f60ee7eacbd4d7ef875e94a6431edb20d9af6e5d6f2952760bd454cb5ce959fdab1046e2750fd23b1d9543a931ab721277eda91c4b0a

    • SSDEEP

      192:go0m88aHVua5rD5sUiaFaNJhLkwcud2DH9VwGfct1S:T0m1a5pE+aNJawcudoD7UO

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks