General
- Target 52fc3da5be0665ee88bba8944b8385002df205bc83d3c68e969d980227937238.bin
- Size 184KB
- Sample221106-vhpedsedgq
- SHA256 52fc3da5be0665ee88bba8944b8385002df205bc83d3c68e969d980227937238
- MD5 18ee404c378f88028bb9f62b60ce03fd
- SHA1 c0e7e9cb52e0d9ca9efd986f56f039dff0713c98
- SHA512 2343152375ea206f6cb0069e82cb913e1e9c5f62a3777c2a99d180b4489cb14c8546f1279a66a4735a013d88a12db4ce2ee0d9d5c047e8036640820f877bfdaa
- SSDEEP 3072:Cl93zZHgog3iyNN9ufkEJ9jAOQVF+YFXL/uHVtS9Hzy1Q/iAHMP8Enu+2:CXzZHgBiy7nE/SVF+YFXL/uHVtS9Hzyz
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
52fc3da5be0665ee88bba8944b8385002df205bc83d3c68e969d980227937238.exe
Resource
win7-20220812-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
52fc3da5be0665ee88bba8944b8385002df205bc83d3c68e969d980227937238.exe
Resource
win10-20220812-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 52fc3da5be0665ee88bba8944b8385002df205bc83d3c68e969d980227937238.bin
- Size 184KB
- SHA256 52fc3da5be0665ee88bba8944b8385002df205bc83d3c68e969d980227937238
- MD5 18ee404c378f88028bb9f62b60ce03fd
- SHA1 c0e7e9cb52e0d9ca9efd986f56f039dff0713c98
- SHA512 2343152375ea206f6cb0069e82cb913e1e9c5f62a3777c2a99d180b4489cb14c8546f1279a66a4735a013d88a12db4ce2ee0d9d5c047e8036640820f877bfdaa
- SSDEEP 3072:Cl93zZHgog3iyNN9ufkEJ9jAOQVF+YFXL/uHVtS9Hzy1Q/iAHMP8Enu+2:CXzZHgBiy7nE/SVF+YFXL/uHVtS9Hzyz
- MD5 SHA1 SHA512 SSDEEP
Zingo stealer payload
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.