Analysis
-
max time kernel
4294181s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20220223-en -
submitted
10-03-2022 22:57
Static task
static1
Behavioral task
behavioral1
Sample
429d367426d5af533aae37ba504b2b2b04595c2bf7f6edcb6ff6f3ae062fe5ef.exe
Resource
win7-20220223-en
Behavioral task
behavioral2
Sample
429d367426d5af533aae37ba504b2b2b04595c2bf7f6edcb6ff6f3ae062fe5ef.exe
Resource
win10v2004-en-20220113
General
-
Target
429d367426d5af533aae37ba504b2b2b04595c2bf7f6edcb6ff6f3ae062fe5ef.exe
-
Size
552KB
-
MD5
20dbcf99312f9a6c20657fc308431444
-
SHA1
03728e301e24e5afa9ba5ed8d4fda9416863b95d
-
SHA256
429d367426d5af533aae37ba504b2b2b04595c2bf7f6edcb6ff6f3ae062fe5ef
-
SHA512
92b9878bbb0f4bf52baebfc5508d3eadfd1916c67fdce2b49581b280adb66cec66de0aaefea7e09873be0987cda84b4e71e5f17f86f0b60a685c5115e330060f
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
Processes:
flow ioc 5 bot.whatismyipaddress.com