Resubmissions

16-10-2022 11:14

221016-nchakahdan 6

16-10-2022 10:56

221016-m149kahda3 3

General

  • Target

    9beb3fcad21f5ff7378d14217abeaa734cb1272471ca928185186e7a52678675

  • Size

    3.9MB

  • Sample

    221016-nchakahdan

  • MD5

    d8dfac398555e946ecc533198738f8c6

  • SHA1

    35f4571b7efe542d6a5b7681d8d9276274c0d52d

  • SHA256

    9beb3fcad21f5ff7378d14217abeaa734cb1272471ca928185186e7a52678675

  • SHA512

    5df2fd14453cd47f3db78ba48b9771253033e05807feead7c7174738f5d5ea6b18a47f68d55f88fb9d9d2dbac25f3af2d2bbad9f3087ef1b330d2c43c35b4939

  • SSDEEP

    98304:a9KhGI6eXdNk/kgz/3lvoYXHbpEYpJDW5sRhjQFfy:aqD6eXPBQ/3lwYXlEYphWmRqy

Score
6/10

Malware Config

Targets

    • Target

      9beb3fcad21f5ff7378d14217abeaa734cb1272471ca928185186e7a52678675

    • Size

      3.9MB

    • MD5

      d8dfac398555e946ecc533198738f8c6

    • SHA1

      35f4571b7efe542d6a5b7681d8d9276274c0d52d

    • SHA256

      9beb3fcad21f5ff7378d14217abeaa734cb1272471ca928185186e7a52678675

    • SHA512

      5df2fd14453cd47f3db78ba48b9771253033e05807feead7c7174738f5d5ea6b18a47f68d55f88fb9d9d2dbac25f3af2d2bbad9f3087ef1b330d2c43c35b4939

    • SSDEEP

      98304:a9KhGI6eXdNk/kgz/3lvoYXHbpEYpJDW5sRhjQFfy:aqD6eXPBQ/3lwYXlEYphWmRqy

    Score
    6/10
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks