General
-
Target
96e597afe1bacc65ce87b8936bf8f4473c88688ab2684a598a4a83df1cc072f8
-
Size
4.2MB
-
Sample
220521-mjhn8sfabn
-
MD5
90a060f8dc5dcd7874cdd415dc67af90
-
SHA1
dae2b010bd8069c96c814884e426f09168fae36d
-
SHA256
96e597afe1bacc65ce87b8936bf8f4473c88688ab2684a598a4a83df1cc072f8
-
SHA512
6ac0bdb19aa457f8f5b18c29d4fffbcd9a20afc908bbe3b384eff5f31f4c534eb2bf66c449529792701fcaf30123e9ca10e54eae2e9a5eac2665ce25860d0672
Static task
static1
Behavioral task
behavioral1
Sample
96e597afe1bacc65ce87b8936bf8f4473c88688ab2684a598a4a83df1cc072f8.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
96e597afe1bacc65ce87b8936bf8f4473c88688ab2684a598a4a83df1cc072f8.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
96e597afe1bacc65ce87b8936bf8f4473c88688ab2684a598a4a83df1cc072f8
-
Size
4.2MB
-
MD5
90a060f8dc5dcd7874cdd415dc67af90
-
SHA1
dae2b010bd8069c96c814884e426f09168fae36d
-
SHA256
96e597afe1bacc65ce87b8936bf8f4473c88688ab2684a598a4a83df1cc072f8
-
SHA512
6ac0bdb19aa457f8f5b18c29d4fffbcd9a20afc908bbe3b384eff5f31f4c534eb2bf66c449529792701fcaf30123e9ca10e54eae2e9a5eac2665ce25860d0672
Score8/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-