Overview

overview

6

Static

static

Itemslists.scr

windows7_x64

6

Itemslists.scr

windows10_x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Itemslists.scr
  • Size 488KB
  • Sample200716-ples63f146
  • SHA256 1b68f5ab26d4fd7c7ca1933dd8dcc6f6f879104a072dc92f9d5917ad42a3cfd7
  • MD5 SHA1 SHA512
Score
6/10

Malware Config

Targets

    • Target
      Itemslists.scr
    • Size 488KB
    • SHA256 1b68f5ab26d4fd7c7ca1933dd8dcc6f6f879104a072dc92f9d5917ad42a3cfd7
    • MD5 SHA1 SHA512
    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks