Overview

overview

8

Static

static

41514a35b1...88.exe

windows7-x64

8

41514a35b1...88.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41514a35b130af2ea475b0cb292166d671f684760febe933ed801f50bb456d88

  • Size

    164KB

  • Sample

    221124-lbl61sdf95

  • MD5

    09cb12d7cd0228360cd097baeaaa6552

  • SHA1

    c4d395545bfe7eb980e811bfeeed40f24b58f27a

  • SHA256

    41514a35b130af2ea475b0cb292166d671f684760febe933ed801f50bb456d88

  • SHA512

    7195d17421bbcc24e0f9521aa76a7edb527d9dce399d7e53a25ca6f334d522cab5b388aa0b9bc74f4586252f595860330ecb110c442894864f9f6eed5bc98851

  • SSDEEP

    3072:v/obD3KFdIbdHqhwBrzmRp8Z/WPGaY7XmlXN2/9uaGXl1wiK4hc0NHg5Jw:v8D3KERHqJCZ+A7XmJmua4whigg

Score
8/10
persistence

Malware Config

Targets

    • Target

      41514a35b130af2ea475b0cb292166d671f684760febe933ed801f50bb456d88

    • Size

      164KB

    • MD5

      09cb12d7cd0228360cd097baeaaa6552

    • SHA1

      c4d395545bfe7eb980e811bfeeed40f24b58f27a

    • SHA256

      41514a35b130af2ea475b0cb292166d671f684760febe933ed801f50bb456d88

    • SHA512

      7195d17421bbcc24e0f9521aa76a7edb527d9dce399d7e53a25ca6f334d522cab5b388aa0b9bc74f4586252f595860330ecb110c442894864f9f6eed5bc98851

    • SSDEEP

      3072:v/obD3KFdIbdHqhwBrzmRp8Z/WPGaY7XmlXN2/9uaGXl1wiK4hc0NHg5Jw:v8D3KERHqJCZ+A7XmJmua4whigg

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks