Overview

overview

8

Static

static

a659649dc7...22.exe

windows7-x64

8

a659649dc7...22.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a659649dc7598d9f91dd693d060f084359b16225b8b9962864e2d2fe10c89922

  • Size

    38KB

  • Sample

    221019-1xp75aade5

  • MD5

    90eaf3faf3295ef6684fd2ece3ba7e60

  • SHA1

    105b7d09072af63e5b3bbc328df4c2f9d7a4babc

  • SHA256

    a659649dc7598d9f91dd693d060f084359b16225b8b9962864e2d2fe10c89922

  • SHA512

    37ee4f5e9bc0d169358b92926a3432460d7f0ff4c380da33f11a159d0c3a247b3f12fe58533f4126ab011934775845076d6f133a84ef09a7411da8e97045d973

  • SSDEEP

    768:czyLcNnrfYOjFgZn6HXx8mmj1qEQoSSdrXv2/YD0ZRJ:czyINscFKMx8mmj1LQoSsrXOQD

Score
8/10

Malware Config

Targets

    • Target

      a659649dc7598d9f91dd693d060f084359b16225b8b9962864e2d2fe10c89922

    • Size

      38KB

    • MD5

      90eaf3faf3295ef6684fd2ece3ba7e60

    • SHA1

      105b7d09072af63e5b3bbc328df4c2f9d7a4babc

    • SHA256

      a659649dc7598d9f91dd693d060f084359b16225b8b9962864e2d2fe10c89922

    • SHA512

      37ee4f5e9bc0d169358b92926a3432460d7f0ff4c380da33f11a159d0c3a247b3f12fe58533f4126ab011934775845076d6f133a84ef09a7411da8e97045d973

    • SSDEEP

      768:czyLcNnrfYOjFgZn6HXx8mmj1qEQoSSdrXv2/YD0ZRJ:czyINscFKMx8mmj1LQoSsrXOQD

    Score
    8/10

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks