Analysis
-
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
24-05-2022 16:33
Static task
static1
Behavioral task
behavioral1
Sample
6b7c0aefac658e3b104b8e0a56ce9d66c4e1043d1383c3f5a68e57b9167b1177.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
6b7c0aefac658e3b104b8e0a56ce9d66c4e1043d1383c3f5a68e57b9167b1177.exe
Resource
win10v2004-20220414-en
General
-
Target
6b7c0aefac658e3b104b8e0a56ce9d66c4e1043d1383c3f5a68e57b9167b1177.exe
-
Size
1.3MB
-
MD5
3286d2d7dd3441fa833e4f94986675e3
-
SHA1
5e9943e7baf5669d708881e562e298a9858aa526
-
SHA256
6b7c0aefac658e3b104b8e0a56ce9d66c4e1043d1383c3f5a68e57b9167b1177
-
SHA512
f494ea05ec5dd154794ffffc6821f7b44191b5b6e472cdc0b70ddd05cb6fad7e425e7792ae1210ec2982e312abee9d1cee7945f426bd2df9ffc5c32e908abf68
Malware Config
Signatures
-
Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 18 api.ipify.org 25 api.ipify.org