Overview

overview

7

Static

static

session-de....1.exe

windows7-x64

7

session-de....1.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    session-desktop-win-1.10.1.exe

  • Size

    69.0MB

  • Sample

    220922-ngh3nafaek

  • MD5

    c92529fdf508887915c008e31c16ef22

  • SHA1

    19434b3b84e06cd1f15ec273ea0789799c29b342

  • SHA256

    166224a6a5951651648525bee78503975fa334d9cf5c18df3978d2151817b66c

  • SHA512

    84526601585c7a3c1a9bb4739f561ae721f4c32209e313c83a6e52e897f07df8c314b745be377ebd3a958a1f3b600b61348bfe60a798f537ae5de04b1109d59b

  • SSDEEP

    1572864:RZ9y7PZO2kX6Z4v0lwSZ5k8QJvz+HW+LPPLOgHgYLTG7hphzXn669klH7:RZ9qhORX6Z4cle8QJqtDOgAYLTGFX61

Score
7/10

Malware Config

Targets

    • Target

      session-desktop-win-1.10.1.exe

    • Size

      69.0MB

    • MD5

      c92529fdf508887915c008e31c16ef22

    • SHA1

      19434b3b84e06cd1f15ec273ea0789799c29b342

    • SHA256

      166224a6a5951651648525bee78503975fa334d9cf5c18df3978d2151817b66c

    • SHA512

      84526601585c7a3c1a9bb4739f561ae721f4c32209e313c83a6e52e897f07df8c314b745be377ebd3a958a1f3b600b61348bfe60a798f537ae5de04b1109d59b

    • SSDEEP

      1572864:RZ9y7PZO2kX6Z4v0lwSZ5k8QJvz+HW+LPPLOgHgYLTG7hphzXn669klH7:RZ9qhORX6Z4cle8QJqtDOgAYLTGFX61

    Score
    7/10

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks