General
- Target SecuriteInfo.com.Variant.Zusy.435740.23236.7112
- Size 215KB
- Sample220817-n86m2aaca6
- SHA256 768540de4df55eedd3b6bb4d9ec9bf3eee1fbe14270cd9e828d1e1a6a3893d02
- MD5 1ac432ab6bc101d9fb26e12095d98c99
- SHA1 a66063f184f981681411fcee0e7b4e064cc65ad3
- SHA512 c71901edc0839a6795dafddec3adcaa56fc10062bca71e5b2612502e8d16c1ebc133eec154b5df9b44dac5849a5a91d8bd52bf4e2dca074218ac9e8f640a42b5
- SSDEEP 6144:BiCrWUL4owY0pyEcYAOskAJe13EP/JJXgnQ:BiGWUcZKne1Uz2Q
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Zusy.435740.23236.exe
Resource
win7-20220812-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Zusy.435740.23236.exe
Resource
win10v2004-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.Variant.Zusy.435740.23236.7112
- Size 215KB
- SHA256 768540de4df55eedd3b6bb4d9ec9bf3eee1fbe14270cd9e828d1e1a6a3893d02
- MD5 1ac432ab6bc101d9fb26e12095d98c99
- SHA1 a66063f184f981681411fcee0e7b4e064cc65ad3
- SHA512 c71901edc0839a6795dafddec3adcaa56fc10062bca71e5b2612502e8d16c1ebc133eec154b5df9b44dac5849a5a91d8bd52bf4e2dca074218ac9e8f640a42b5
- SSDEEP 6144:BiCrWUL4owY0pyEcYAOskAJe13EP/JJXgnQ:BiGWUcZKne1Uz2Q
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext