General
-
Target
93d3b0b78ebdb1d4e012bbe0b89b5996a75985f54cf9c880792712b21931443e
-
Size
1016KB
-
Sample
221126-zda4escf42
-
MD5
67f0eb344e763e57327fcbd99dc626af
-
SHA1
789ffd98a77e2a79e8a4af6f275840bfb68b43b2
-
SHA256
93d3b0b78ebdb1d4e012bbe0b89b5996a75985f54cf9c880792712b21931443e
-
SHA512
fa366f3d56e144d885245595e835ce884b3bb713dc11b14b9dddf38b5b7260ac5e4fbb049d783afe59b5e5f8cb6d947a9e4adb1105c72f41e73f30aea2899bb4
-
SSDEEP
24576:m+Ht7JcbG14mMZ91jgcvNICHs1GjQywtGXb9ji1wrgGOtdM1MmIM:mit7JcCQP1jgKjHs0jQ1tGr9tIjQK
Static task
static1
Behavioral task
behavioral1
Sample
93d3b0b78ebdb1d4e012bbe0b89b5996a75985f54cf9c880792712b21931443e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
93d3b0b78ebdb1d4e012bbe0b89b5996a75985f54cf9c880792712b21931443e.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
93d3b0b78ebdb1d4e012bbe0b89b5996a75985f54cf9c880792712b21931443e
-
Size
1016KB
-
MD5
67f0eb344e763e57327fcbd99dc626af
-
SHA1
789ffd98a77e2a79e8a4af6f275840bfb68b43b2
-
SHA256
93d3b0b78ebdb1d4e012bbe0b89b5996a75985f54cf9c880792712b21931443e
-
SHA512
fa366f3d56e144d885245595e835ce884b3bb713dc11b14b9dddf38b5b7260ac5e4fbb049d783afe59b5e5f8cb6d947a9e4adb1105c72f41e73f30aea2899bb4
-
SSDEEP
24576:m+Ht7JcbG14mMZ91jgcvNICHs1GjQywtGXb9ji1wrgGOtdM1MmIM:mit7JcCQP1jgKjHs0jQ1tGr9tIjQK
-
Uses the VBS compiler for execution
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-