Overview

overview

8

Static

static

57f030bef6...a0.exe

windows7-x64

8

57f030bef6...a0.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    57f030bef6345b045b57f70fd9c1e0f313a9ee1c7de49d162ccf98a23e12cba0

  • Size

    31KB

  • Sample

    221004-cggztagee8

  • MD5

    4afd665a8eda0c4ef61ea8a9b048da10

  • SHA1

    d69905f7341809eea4a65290be66bb2ac60b115a

  • SHA256

    57f030bef6345b045b57f70fd9c1e0f313a9ee1c7de49d162ccf98a23e12cba0

  • SHA512

    0a1fd436b8dc6bf11f86c1fe80a5f14baeda3943c8b0c598794d4c17180bb9be449cb470e2d0b33d772787a78410ebc0b794ab941f54089374d00be8e0a9c52c

  • SSDEEP

    768:gHjJZAil0nPs3witNBD1oH3X4RoZk4U+PpBwGjpYDI:2f+UgitXD1oXX4RoZk4U+Pp71YM

Score
8/10

Malware Config

Targets

    • Target

      57f030bef6345b045b57f70fd9c1e0f313a9ee1c7de49d162ccf98a23e12cba0

    • Size

      31KB

    • MD5

      4afd665a8eda0c4ef61ea8a9b048da10

    • SHA1

      d69905f7341809eea4a65290be66bb2ac60b115a

    • SHA256

      57f030bef6345b045b57f70fd9c1e0f313a9ee1c7de49d162ccf98a23e12cba0

    • SHA512

      0a1fd436b8dc6bf11f86c1fe80a5f14baeda3943c8b0c598794d4c17180bb9be449cb470e2d0b33d772787a78410ebc0b794ab941f54089374d00be8e0a9c52c

    • SSDEEP

      768:gHjJZAil0nPs3witNBD1oH3X4RoZk4U+PpBwGjpYDI:2f+UgitXD1oXX4RoZk4U+Pp71YM

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks