General
- Target Pago 31 Mar 2021 at 2.15PP3343PDF.jar
- Size 100KB
- Sample210331-psygly9kba
- SHA256 1cfba0ba32dbe3bb0b14a95da032d6cda94eaa5c65135973eea16d12e07e5b58
- MD5 efff05f2e8302a3801b7b4cedbcf2cba
- SHA1 234c8984e545d77ac64c30898ca3d6bf227f24fa
- SHA512 989d3169a12afdc5af695674e7c45ae45cde59c01075c8b9927cbb2f3efc36aec1089b5c66b96b38133c5cdb5b6504b90dd7c9dd4326667ef3ea54364c6303eb
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Pago 31 Mar 2021 at 2.15PP3343PDF.jar
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Pago 31 Mar 2021 at 2.15PP3343PDF.jar
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target Pago 31 Mar 2021 at 2.15PP3343PDF.jar
- Size 100KB
- SHA256 1cfba0ba32dbe3bb0b14a95da032d6cda94eaa5c65135973eea16d12e07e5b58
- MD5 efff05f2e8302a3801b7b4cedbcf2cba
- SHA1 234c8984e545d77ac64c30898ca3d6bf227f24fa
- SHA512 989d3169a12afdc5af695674e7c45ae45cde59c01075c8b9927cbb2f3efc36aec1089b5c66b96b38133c5cdb5b6504b90dd7c9dd4326667ef3ea54364c6303eb
- MD5 SHA1 SHA512
Score7/10-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.