39cb36fcd31d2322d55ea0c4bd3261fda84b765ed9063920ec2631d481b92468 | Triage

Sharing

General

Target

39cb36fcd31d2322d55ea0c4bd3261fda84b765ed9063920ec2631d481b92468
Size

28KB
Sample

200709-mh4jdd2gb2
MD5

d79868aba4eaa4ff394bb07ec2785d10
SHA1

4061cceb7ce3df2b38437a82815b86cdace2da8a
SHA256

39cb36fcd31d2322d55ea0c4bd3261fda84b765ed9063920ec2631d481b92468
SHA512

e65910ae20b8deee78844e9e1b15733273f709c4c5a9112197692935cbbb84365a29ed7b5fbc7d4c615b0c5dc47c9d797780ad398fba6224d4351a18bcda6bf3

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  39cb36fcd31d2322d55ea0c4bd3261fda84b765ed9063920ec2631d481b92468
- Size
  
  28KB
- MD5
  
  d79868aba4eaa4ff394bb07ec2785d10
- SHA1
  
  4061cceb7ce3df2b38437a82815b86cdace2da8a
- SHA256
  
  39cb36fcd31d2322d55ea0c4bd3261fda84b765ed9063920ec2631d481b92468
- SHA512
  
  e65910ae20b8deee78844e9e1b15733273f709c4c5a9112197692935cbbb84365a29ed7b5fbc7d4c615b0c5dc47c9d797780ad398fba6224d4351a18bcda6bf3
Score

6^/10

persistence
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Modifies service
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Modify Existing Service

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2