General
- Target 3da3ccb28050e4df36b319775cbe283e.exe
- Size 517KB
- Sample210922-ggayqabfa5
- SHA256 fb2fd5d1cd31c753b74ea5d3b372cf96e6e4f9c520c31dd2d14ef17bdf965d3f
- MD5 3da3ccb28050e4df36b319775cbe283e
- SHA1 a459ce98c8dcb44f82ea1d7119900e007d00995e
- SHA512 a43b24595d143aeadab1d04439d6ec2e7c5a9e6bb424ca4f1a4e78f4809e34d6a2e8eec68150c3668e53d746777173b1d1e2e8b6dedfbceedf35ef21c2bd4302
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
3da3ccb28050e4df36b319775cbe283e.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
3da3ccb28050e4df36b319775cbe283e.exe
Resource
win10-en-20210920
0 signatures
0 seconds
Malware Config
Targets
-
- Target 3da3ccb28050e4df36b319775cbe283e.exe
- Size 517KB
- SHA256 fb2fd5d1cd31c753b74ea5d3b372cf96e6e4f9c520c31dd2d14ef17bdf965d3f
- MD5 3da3ccb28050e4df36b319775cbe283e
- SHA1 a459ce98c8dcb44f82ea1d7119900e007d00995e
- SHA512 a43b24595d143aeadab1d04439d6ec2e7c5a9e6bb424ca4f1a4e78f4809e34d6a2e8eec68150c3668e53d746777173b1d1e2e8b6dedfbceedf35ef21c2bd4302
- MD5 SHA1 SHA512
Score7/10-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext