Overview

overview

6

Static

static

1cd60e5192...61.exe

windows7_x64

6

1cd60e5192...61.exe

windows10_x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    1cd60e5192988ae5841a861ef8c45a61.exe
  • Size 643KB
  • Sample210714-fldvsrw166
  • SHA256 4f5eb87739916022c23a6291aaac32e86cef1d92cd9bcf67ec0ed357f1672ca1
  • MD5 SHA1 SHA512
Score
6/10
persistence

Malware Config

Targets

    • Target
      1cd60e5192988ae5841a861ef8c45a61.exe
    • Size 643KB
    • SHA256 4f5eb87739916022c23a6291aaac32e86cef1d92cd9bcf67ec0ed357f1672ca1
    • MD5 SHA1 SHA512
    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks