Overview

overview

8

Static

static

e2888fc6d0...b5.exe

windows7-x64

8

e2888fc6d0...b5.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    e2888fc6d0b4fc7314076f940b1afd735212d2ef528d07c7dca6f04bdeec5eb5

  • Size

    33KB

  • Sample

    221029-bpnlwsehc5

  • MD5

    0b3442caaf8c0123f91c753368aa6fb0

  • SHA1

    ccdb436973983005519e9c385f6363f940f206e7

  • SHA256

    e2888fc6d0b4fc7314076f940b1afd735212d2ef528d07c7dca6f04bdeec5eb5

  • SHA512

    87f15431680b22124cc3e3fb365393b828d80b77cea7888663560a3cf082cad8c4256f2842cb81096dd0d63bb9491e5f31958bb7a1486fe17127d6f23199da36

  • SSDEEP

    768:byXfyVZ7AKAa40a7Xk25eHIvzhQddmeyJq3sZAui:byv+7P/40GLaIrhQddmeyJ1yx

Score
8/10

Malware Config

Targets

    • Target

      e2888fc6d0b4fc7314076f940b1afd735212d2ef528d07c7dca6f04bdeec5eb5

    • Size

      33KB

    • MD5

      0b3442caaf8c0123f91c753368aa6fb0

    • SHA1

      ccdb436973983005519e9c385f6363f940f206e7

    • SHA256

      e2888fc6d0b4fc7314076f940b1afd735212d2ef528d07c7dca6f04bdeec5eb5

    • SHA512

      87f15431680b22124cc3e3fb365393b828d80b77cea7888663560a3cf082cad8c4256f2842cb81096dd0d63bb9491e5f31958bb7a1486fe17127d6f23199da36

    • SSDEEP

      768:byXfyVZ7AKAa40a7Xk25eHIvzhQddmeyJq3sZAui:byv+7P/40GLaIrhQddmeyJ1yx

    Score
    8/10

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks