General
-
Target
Nord VPN Brute Checker By MTSoftCrack.rar
-
Size
345KB
-
Sample
221125-s1exkagf33
-
MD5
cd67a253d1eadfa8cb5c5321f7357282
-
SHA1
b2ce755f8709e0839358de51b9dc32ab1db8c313
-
SHA256
0842bdbdb5447154f1296b9897f3ca4bbce1941458e2c0e43b34463017e754de
-
SHA512
16dc3519ff6006acf29bdbed050e8632b9f6a38b1719e847d22b3036bd8ed7ad9035888e876f4147f98474de986d4690ebf791efab70c423f6f0a54764e84517
-
SSDEEP
6144:A4ZarZZCejaDAXSyuQIwfN2MRL1nglZ3DESd26c5fAtOcyICSz4rhZ5i/:AQ+ZAejaDgEwQ0JnwAE8fAJ+SzwC
Static task
static1
Behavioral task
behavioral1
Sample
Nord VPN Brute Checker By MTSoftCrack/Nord VPN Brute Checker.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
Nord VPN Brute Checker By MTSoftCrack/Nord VPN Brute Checker.exe
-
Size
365KB
-
MD5
66371907bd2317b82e2f8e5aef1729e7
-
SHA1
190e7ec2bb64d5f8f12552cab8e66c165bd537ac
-
SHA256
854f6eda174f41f8c018ec4a01d0df8eae63d5200e1ee7581418f80474a2b570
-
SHA512
d6bbaff9b998feed287eb0f8e15208de455c14eeff1c3a510acd0060abe1d651d448250edd9f0a8b1bff23616063ce704832ab88802821cd0361129ac32d6fea
-
SSDEEP
6144:x0A/NP+WybUhuerzIF5ykg7Bi/n42vlHLNbOZ16/w8Y/2PrZyEg2yWRlNQ:xL/t+WFdlM/42vtxbOZ4BYutTNJi
Score8/10-
Downloads MZ/PE file
-
Accesses Microsoft Outlook profiles
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-