Overview

overview

8

Static

static

7c8d8f67c7...31.exe

windows7-x64

8

7c8d8f67c7...31.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7c8d8f67c7b28a87115d0954f0ed44523ba2dbd1df166a2c48e7414ae8b95c31

  • Size

    379KB

  • Sample

    221127-lsfessgb97

  • MD5

    4ffb604ff135a1e069cd3bc0532da0a9

  • SHA1

    1387b82128415a320b5c29be2e349ee1cf873dd7

  • SHA256

    7c8d8f67c7b28a87115d0954f0ed44523ba2dbd1df166a2c48e7414ae8b95c31

  • SHA512

    ff55ae9f34654ffd715956595a8f64d848afcb9bcc9a1ad3e78218f5dd0d1b23bbc0eef8b3ba46acf1e9348d3834a42ade61d05c06b2d507664e93afa6ad2cd9

  • SSDEEP

    6144:K9ZS0+z6mGJtSMQAw15eXR1kivfx1YcrN1aQkXfYd0j72+ykj:KXbXma2eh1rHx1FBsAd0/fyk

Score
8/10

Malware Config

Targets

    • Target

      7c8d8f67c7b28a87115d0954f0ed44523ba2dbd1df166a2c48e7414ae8b95c31

    • Size

      379KB

    • MD5

      4ffb604ff135a1e069cd3bc0532da0a9

    • SHA1

      1387b82128415a320b5c29be2e349ee1cf873dd7

    • SHA256

      7c8d8f67c7b28a87115d0954f0ed44523ba2dbd1df166a2c48e7414ae8b95c31

    • SHA512

      ff55ae9f34654ffd715956595a8f64d848afcb9bcc9a1ad3e78218f5dd0d1b23bbc0eef8b3ba46acf1e9348d3834a42ade61d05c06b2d507664e93afa6ad2cd9

    • SSDEEP

      6144:K9ZS0+z6mGJtSMQAw15eXR1kivfx1YcrN1aQkXfYd0j72+ykj:KXbXma2eh1rHx1FBsAd0/fyk

    Score
    8/10

    • Executes dropped EXE

    • Deletes itself

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks