Overview

overview

8

Static

static

29a128e33e...4c.exe

windows7-x64

8

29a128e33e...4c.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    29a128e33ef810cc4644228a1beb1f8e780b10bca53c660adb858cf0b80b554c

  • Size

    31KB

  • Sample

    221030-j66g2abhcr

  • MD5

    938e76add4605971bb7c60b261f635c0

  • SHA1

    0c3bb1b2a7306db8f14385ee18dafea7e9b54eb9

  • SHA256

    29a128e33ef810cc4644228a1beb1f8e780b10bca53c660adb858cf0b80b554c

  • SHA512

    ff5d9517d780d8cab9791c8bd3045a55c6dbc685f13d28a0bb2835b573e10387ddf87835fd88acd3ddcb654b59a61c13979b196178879b027b5a109d2eaf91d9

  • SSDEEP

    384:/Px818wbcc4BkW3t/oaA10txq6KaLKaYk8rufyDX4vx++E/nAtF2KbLDl4L7YTx:3xS8wwAutqDkyLDX4vx+/fAtrbLTV

Score
8/10

Malware Config

Targets

    • Target

      29a128e33ef810cc4644228a1beb1f8e780b10bca53c660adb858cf0b80b554c

    • Size

      31KB

    • MD5

      938e76add4605971bb7c60b261f635c0

    • SHA1

      0c3bb1b2a7306db8f14385ee18dafea7e9b54eb9

    • SHA256

      29a128e33ef810cc4644228a1beb1f8e780b10bca53c660adb858cf0b80b554c

    • SHA512

      ff5d9517d780d8cab9791c8bd3045a55c6dbc685f13d28a0bb2835b573e10387ddf87835fd88acd3ddcb654b59a61c13979b196178879b027b5a109d2eaf91d9

    • SSDEEP

      384:/Px818wbcc4BkW3t/oaA10txq6KaLKaYk8rufyDX4vx++E/nAtF2KbLDl4L7YTx:3xS8wwAutqDkyLDX4vx+/fAtrbLTV

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks