Overview

overview

8

Static

static

3

Drone2.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Drone2.exe

  • Size

    10.8MB

  • Sample

    221004-ydvmdscedq

  • MD5

    4c00dff8e0b7b11c3513f1cfb7f8df65

  • SHA1

    edbb16b9932e0e5fbf3ec8801eaced09bbccb03f

  • SHA256

    61514d3d8c2c14fa94a1574d283257cf80d185aeee3cfb99dcff71c347fa0d8c

  • SHA512

    da8db30d6b96e15db6725e0c0fc7ae01eebc5a75e6ba1192f3d9af0dd6ff3603505f53ef0c7c94efab9cccbfea66bb202a367b6aaa16642491eb6ee4f3140b88

  • SSDEEP

    196608:nXOUpbDO6DjzpLRUZtO0oAinb9ZJf0W8/La9+x77Sxs5FpjyX9DWC5g:Fpb3dCEb9ZJcW84W7G2PpG4y

Score
8/10
pyinstallerupx

Malware Config

Targets

    • Target

      Drone2.exe

    • Size

      10.8MB

    • MD5

      4c00dff8e0b7b11c3513f1cfb7f8df65

    • SHA1

      edbb16b9932e0e5fbf3ec8801eaced09bbccb03f

    • SHA256

      61514d3d8c2c14fa94a1574d283257cf80d185aeee3cfb99dcff71c347fa0d8c

    • SHA512

      da8db30d6b96e15db6725e0c0fc7ae01eebc5a75e6ba1192f3d9af0dd6ff3603505f53ef0c7c94efab9cccbfea66bb202a367b6aaa16642491eb6ee4f3140b88

    • SSDEEP

      196608:nXOUpbDO6DjzpLRUZtO0oAinb9ZJf0W8/La9+x77Sxs5FpjyX9DWC5g:Fpb3dCEb9ZJcW84W7G2PpG4y

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks