Overview

overview

10

Static

static

10

32bcf0951b...0d.exe

windows7_x64

8

32bcf0951b...0d.exe

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    32bcf0951b1cbe7e95d31e81b450aaf2ab3eb24374eda37266490ed61eb3aa0d

  • Size

    32KB

  • Sample

    200709-n1m4tfemxx

  • MD5

    948dc49c28886bc4a371176123724bb1

  • SHA1

    17d969deecbef6a54cfb7b1b39c0d3edc5ec0c58

  • SHA256

    32bcf0951b1cbe7e95d31e81b450aaf2ab3eb24374eda37266490ed61eb3aa0d

  • SHA512

    5e43aad77b073f3eb9e1833b4633475643705d67da2c752f713d4f22441c1dbacae979e27637ec5292434ba2089d0ae6f4ea472aca9ea90cf136be84e92621ca

Score
10/10
persistence

Malware Config

Targets

    • Target

      32bcf0951b1cbe7e95d31e81b450aaf2ab3eb24374eda37266490ed61eb3aa0d

    • Size

      32KB

    • MD5

      948dc49c28886bc4a371176123724bb1

    • SHA1

      17d969deecbef6a54cfb7b1b39c0d3edc5ec0c58

    • SHA256

      32bcf0951b1cbe7e95d31e81b450aaf2ab3eb24374eda37266490ed61eb3aa0d

    • SHA512

      5e43aad77b073f3eb9e1833b4633475643705d67da2c752f713d4f22441c1dbacae979e27637ec5292434ba2089d0ae6f4ea472aca9ea90cf136be84e92621ca

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Modifies service

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks