General
- Target TOOL.exe
- Size 15.3MB
- Sample201124-q3tfajscv2
- SHA256 b6bfb18cb265786cbf4373a6dc82d4b8ec586d90f6a6e2cc72a1a3d20b60dda9
- MD5 93756e29b83c7fcde7846a1dfd30da6a
- SHA1 5dbe2cf5b3bcebbaff5f3428303f3acb2afac1e2
- SHA512 5bb417b5700652fb4f4e20b3e6ea3c40b5939eb7ed73137f0ce54ecc7e81a1a03ec599c88788afd3dfa802963374aed4a8147ab5e298308e61a068d257ead65a
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
TOOL.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
TOOL.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target TOOL.exe
- Size 15.3MB
- SHA256 b6bfb18cb265786cbf4373a6dc82d4b8ec586d90f6a6e2cc72a1a3d20b60dda9
- MD5 93756e29b83c7fcde7846a1dfd30da6a
- SHA1 5dbe2cf5b3bcebbaff5f3428303f3acb2afac1e2
- SHA512 5bb417b5700652fb4f4e20b3e6ea3c40b5939eb7ed73137f0ce54ecc7e81a1a03ec599c88788afd3dfa802963374aed4a8147ab5e298308e61a068d257ead65a
- MD5 SHA1 SHA512
Score7/10-
Loads dropped DLL
-
JavaScript code in executable
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.