Overview

overview

7

Static

static

39f483d683...12.exe

windows7-x64

7

39f483d683...12.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    39f483d6830be19ce1b3f49427b52f8f24b5fc630e9bdcc135b3c75510364112

  • Size

    24KB

  • Sample

    221020-y8f3gsdea8

  • MD5

    812c2e6ddb575fb9789df6e76ad37e00

  • SHA1

    deeae1d955843403a7e62a026d7ea4cfb75c985f

  • SHA256

    39f483d6830be19ce1b3f49427b52f8f24b5fc630e9bdcc135b3c75510364112

  • SHA512

    15769b6061cf01ae8d657058a92f44d07f29d63bb007497310eebb05c88fef32bcd1644cb1ed9440e817ff89c0b96d065869ebffdf511cd0348f759d744330fb

  • SSDEEP

    384:qcewIgf3Yf/GKx9s8jrQpG3dXE2yBQ3tivK8HeYWiZzdJ26zuIqMW6knARw0np:rew4fum9v40AnKzqxK6fqMWxi

Score
7/10

Malware Config

Targets

    • Target

      39f483d6830be19ce1b3f49427b52f8f24b5fc630e9bdcc135b3c75510364112

    • Size

      24KB

    • MD5

      812c2e6ddb575fb9789df6e76ad37e00

    • SHA1

      deeae1d955843403a7e62a026d7ea4cfb75c985f

    • SHA256

      39f483d6830be19ce1b3f49427b52f8f24b5fc630e9bdcc135b3c75510364112

    • SHA512

      15769b6061cf01ae8d657058a92f44d07f29d63bb007497310eebb05c88fef32bcd1644cb1ed9440e817ff89c0b96d065869ebffdf511cd0348f759d744330fb

    • SSDEEP

      384:qcewIgf3Yf/GKx9s8jrQpG3dXE2yBQ3tivK8HeYWiZzdJ26zuIqMW6knARw0np:rew4fum9v40AnKzqxK6fqMWxi

    Score
    7/10

    • Deletes itself

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks