General
-
Target
lol.exe
-
Size
6.8MB
-
Sample
211006-tek25abfbk
-
MD5
4eb70e6ca68fd90ce23f809bceea02d7
-
SHA1
0f96257dd603feabcfeca22f0ce5029f17ba4c2d
-
SHA256
b8a9fcde3cb3f9130318b07a3b8c715e8fd9edcef11aa8af56b3942cf2566943
-
SHA512
76ffc45928fb6f21a511e6a30ecf4de2877d5b982ee553279ccb642db852ebe7edbf56c37fd4d3aa7b40a91c9df0cd193523a71f9b6907e7650a10d72a448705
Static task
static1
Behavioral task
behavioral1
Sample
lol.exe
Resource
win7-en-20210920
Malware Config
Targets
-
-
Target
lol.exe
-
Size
6.8MB
-
MD5
4eb70e6ca68fd90ce23f809bceea02d7
-
SHA1
0f96257dd603feabcfeca22f0ce5029f17ba4c2d
-
SHA256
b8a9fcde3cb3f9130318b07a3b8c715e8fd9edcef11aa8af56b3942cf2566943
-
SHA512
76ffc45928fb6f21a511e6a30ecf4de2877d5b982ee553279ccb642db852ebe7edbf56c37fd4d3aa7b40a91c9df0cd193523a71f9b6907e7650a10d72a448705
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-