Overview

overview

8

Static

static

b6b410de4e...8e.exe

windows7-x64

8

b6b410de4e...8e.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    b6b410de4eeff6b8e577742f8733ddfe007c30ed7bcae88c7845ffbd42fc0b8e

  • Size

    74KB

  • Sample

    221106-nh42hsbfgk

  • MD5

    a9ff05a2b5d5fc44c62a6202fdf21bf8

  • SHA1

    a223f08829323927efc9996fd722bc539d8f28f3

  • SHA256

    b6b410de4eeff6b8e577742f8733ddfe007c30ed7bcae88c7845ffbd42fc0b8e

  • SHA512

    e52e44bea4b23521cfebe46909ec203c9508d3df64f1007caf31b7c40d7f9f8c5b889ab0fac65b154198a0be599b47a0465d2e0f22d5118459bc3e53b97cbd9a

  • SSDEEP

    1536:NvqyNplTJN56ik1omQ+ASImom5TqcF6NXqXvdziUuHu1:hNpZBuomQ+SHNXqXvdziUog

Score
8/10

Malware Config

Targets

    • Target

      b6b410de4eeff6b8e577742f8733ddfe007c30ed7bcae88c7845ffbd42fc0b8e

    • Size

      74KB

    • MD5

      a9ff05a2b5d5fc44c62a6202fdf21bf8

    • SHA1

      a223f08829323927efc9996fd722bc539d8f28f3

    • SHA256

      b6b410de4eeff6b8e577742f8733ddfe007c30ed7bcae88c7845ffbd42fc0b8e

    • SHA512

      e52e44bea4b23521cfebe46909ec203c9508d3df64f1007caf31b7c40d7f9f8c5b889ab0fac65b154198a0be599b47a0465d2e0f22d5118459bc3e53b97cbd9a

    • SSDEEP

      1536:NvqyNplTJN56ik1omQ+ASImom5TqcF6NXqXvdziUuHu1:hNpZBuomQ+SHNXqXvdziUog

    Score
    8/10

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks