General
-
Target
e855d451a62df108cd81c8bc350d24c60cad32981db4d8df08937804be5ddde0
-
Size
304KB
-
Sample
221126-kzdzwaff63
-
MD5
9ef90f617a781cd6c0d0d3c4cbb449d7
-
SHA1
985d26bc7255e0c13780c507783498570ceb5868
-
SHA256
e855d451a62df108cd81c8bc350d24c60cad32981db4d8df08937804be5ddde0
-
SHA512
5ddc459633042ab86e0ef66d5d479a64962c6c9efefc37e0229f2c37ae653a81d83f6d80a0f36b4bf0bccbdca69e90d963397469d84f8e5ef54c9796e6221c88
-
SSDEEP
6144:ByCLJBUUYhMVB0KV9FRXODf5nKzn+eL1om9T7:rb6ev1zXgf5nKbBLr7
Static task
static1
Behavioral task
behavioral1
Sample
e855d451a62df108cd81c8bc350d24c60cad32981db4d8df08937804be5ddde0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e855d451a62df108cd81c8bc350d24c60cad32981db4d8df08937804be5ddde0.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
e855d451a62df108cd81c8bc350d24c60cad32981db4d8df08937804be5ddde0
-
Size
304KB
-
MD5
9ef90f617a781cd6c0d0d3c4cbb449d7
-
SHA1
985d26bc7255e0c13780c507783498570ceb5868
-
SHA256
e855d451a62df108cd81c8bc350d24c60cad32981db4d8df08937804be5ddde0
-
SHA512
5ddc459633042ab86e0ef66d5d479a64962c6c9efefc37e0229f2c37ae653a81d83f6d80a0f36b4bf0bccbdca69e90d963397469d84f8e5ef54c9796e6221c88
-
SSDEEP
6144:ByCLJBUUYhMVB0KV9FRXODf5nKzn+eL1om9T7:rb6ev1zXgf5nKbBLr7
Score9/10-
Drops startup file
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-