General

  • Target

    4b0d363ddceeaa55a4fd574915f4cbf4978d38f1cc99de6aa50d10e5c525148f

  • Size

    10.8MB

  • Sample

    211011-w56smahgh7

  • MD5

    fb2e9f7cf73d9b2dd763e66392203d33

  • SHA1

    5937a54b98ea9ade7e72d0cad3ce76fefb4f75b9

  • SHA256

    4b0d363ddceeaa55a4fd574915f4cbf4978d38f1cc99de6aa50d10e5c525148f

  • SHA512

    4d19d43b9e88d8b3971bf51fc0a0a3432af7640825389899beaec13f849cb928a44ef1f86363cb2081cd0203365dcdd6b9338ea82b333a49de6fc9b485ba1350

Score
7/10

Malware Config

Targets

    • Target

      4b0d363ddceeaa55a4fd574915f4cbf4978d38f1cc99de6aa50d10e5c525148f

    • Size

      10.8MB

    • MD5

      fb2e9f7cf73d9b2dd763e66392203d33

    • SHA1

      5937a54b98ea9ade7e72d0cad3ce76fefb4f75b9

    • SHA256

      4b0d363ddceeaa55a4fd574915f4cbf4978d38f1cc99de6aa50d10e5c525148f

    • SHA512

      4d19d43b9e88d8b3971bf51fc0a0a3432af7640825389899beaec13f849cb928a44ef1f86363cb2081cd0203365dcdd6b9338ea82b333a49de6fc9b485ba1350

    Score
    7/10
    • Drops startup file

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks