Overview

overview

8

Static

static

ef654605cf...11.exe

windows7-x64

8

ef654605cf...11.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef654605cffc3348731b64c214067aeb520d9af94133f34a23074746b9608511

  • Size

    152KB

  • Sample

    221107-gl7s9abce9

  • MD5

    07e2acf4ee54420b773820b777145990

  • SHA1

    412452d3675d5dd826139e211b52d5fa3e4730db

  • SHA256

    ef654605cffc3348731b64c214067aeb520d9af94133f34a23074746b9608511

  • SHA512

    356aeeec42bafe3f0f0f37d16007bff612a963e26793273269fd4f15f4e2dce98e8a5a7334b1192d027bb982e55229b9835c4bfccb39a832bb1f0267e77abe1e

  • SSDEEP

    768:VI++xIc+2KjwjTs/hwovRy1IA88Gh0o2hFEOSOnVK3FNbFHupTYfxkXls4U:/1c+QjBovRqSB3rFdK24U

Score
8/10

Malware Config

Targets

    • Target

      ef654605cffc3348731b64c214067aeb520d9af94133f34a23074746b9608511

    • Size

      152KB

    • MD5

      07e2acf4ee54420b773820b777145990

    • SHA1

      412452d3675d5dd826139e211b52d5fa3e4730db

    • SHA256

      ef654605cffc3348731b64c214067aeb520d9af94133f34a23074746b9608511

    • SHA512

      356aeeec42bafe3f0f0f37d16007bff612a963e26793273269fd4f15f4e2dce98e8a5a7334b1192d027bb982e55229b9835c4bfccb39a832bb1f0267e77abe1e

    • SSDEEP

      768:VI++xIc+2KjwjTs/hwovRy1IA88Gh0o2hFEOSOnVK3FNbFHupTYfxkXls4U:/1c+QjBovRqSB3rFdK24U

    Score
    8/10

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks