Analysis
-
max time kernel
4294183s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20220310-en -
submitted
12-03-2022 11:03
Static task
static1
Behavioral task
behavioral1
Sample
874a1aee31e8a9de60baa7cc394697ceeb8caff9ffef3fbaa52b0881f56d4bf7.exe
Resource
win7-20220310-en
Behavioral task
behavioral2
Sample
874a1aee31e8a9de60baa7cc394697ceeb8caff9ffef3fbaa52b0881f56d4bf7.exe
Resource
win10v2004-en-20220113
General
-
Target
874a1aee31e8a9de60baa7cc394697ceeb8caff9ffef3fbaa52b0881f56d4bf7.exe
-
Size
552KB
-
MD5
25e90845d6359aa8a144081318a18067
-
SHA1
8e5cf239b0033de1aa9c101635e51c20f9a88394
-
SHA256
874a1aee31e8a9de60baa7cc394697ceeb8caff9ffef3fbaa52b0881f56d4bf7
-
SHA512
fbbc02d8b1b982950d7c67bc5be2d885b4212791e106b0dd5f9eea59543596d42e40eef636f67b078c7a34c33cecb676b05c6e38547d6869d1039af09f8c86cf
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 4 bot.whatismyipaddress.com