9165bc75e1a727c886b97c5dd3bdc42ed33d22f2895e8a830b94bd27fdeec2eb | Triage™

Resubmissions

19/01/2021, 18:58

210119-pnne9hsykj8

19/01/2021, 17:15

210119-snlavcsd3e8

Sharing

Copy URL Twitter E-mail

General

Target
9cca9e2442840635488611a1e84c1f5a.exe
Size 5.2MB
Sample210119-snlavcsd3e
SHA256 9165bc75e1a727c886b97c5dd3bdc42ed33d22f2895e8a830b94bd27fdeec2eb
MD5 9cca9e2442840635488611a1e84c1f5a
SHA1 0d1d23705124b72fd40617c141f5a02ad1ab8c54
SHA512 8be15334c83c6fac1700fc79dd69fb13e33c0c842694ceccb5d1715c493838e01bc7551314738fc3a2c74ee953ffdd6596a53db5848b4f63d204b325992bbbc2
MD5 SHA1 SHA512

Score

8^/10

pyinstaller

Malware Config

Targets

- Target
  9cca9e2442840635488611a1e84c1f5a.exe
- Size 5.2MB
- SHA256 9165bc75e1a727c886b97c5dd3bdc42ed33d22f2895e8a830b94bd27fdeec2eb
- MD5 9cca9e2442840635488611a1e84c1f5a
- SHA1 0d1d23705124b72fd40617c141f5a02ad1ab8c54
- SHA512 8be15334c83c6fac1700fc79dd69fb13e33c0c842694ceccb5d1715c493838e01bc7551314738fc3a2c74ee953ffdd6596a53db5848b4f63d204b325992bbbc2
- MD5 SHA1 SHA512
Score

8^/10

pyinstaller
- Executes dropped EXE
- Loads dropped DLL
- JavaScript code in executable
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2