Overview

overview

8

Static

static

dd057de816...21.exe

windows7-x64

8

dd057de816...21.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd057de8165b4cdc4321df808ccf52b9016d7fe86b6f8a2cbab3c034df76da21

  • Size

    116KB

  • Sample

    221127-rm688add22

  • MD5

    e5605c2fa197d33290e7d72741cdb6f0

  • SHA1

    5586e363f0c8b79e27a7049c800437af0a6ab0ff

  • SHA256

    dd057de8165b4cdc4321df808ccf52b9016d7fe86b6f8a2cbab3c034df76da21

  • SHA512

    03ca796f44075418816fb8933e06d02a53997f10982a1b57053c70a608b891ad91d986a86fea0925dc8fe37aa2d3db5b4c8692cbf4565b8b9ecc1552f08a322a

  • SSDEEP

    1536:kpr40ncogoqvSDD2TXm+OvD5a2IznYaHjubg:Y9coBGTXOr5a2Issa8

Score
8/10

Malware Config

Targets

    • Target

      dd057de8165b4cdc4321df808ccf52b9016d7fe86b6f8a2cbab3c034df76da21

    • Size

      116KB

    • MD5

      e5605c2fa197d33290e7d72741cdb6f0

    • SHA1

      5586e363f0c8b79e27a7049c800437af0a6ab0ff

    • SHA256

      dd057de8165b4cdc4321df808ccf52b9016d7fe86b6f8a2cbab3c034df76da21

    • SHA512

      03ca796f44075418816fb8933e06d02a53997f10982a1b57053c70a608b891ad91d986a86fea0925dc8fe37aa2d3db5b4c8692cbf4565b8b9ecc1552f08a322a

    • SSDEEP

      1536:kpr40ncogoqvSDD2TXm+OvD5a2IznYaHjubg:Y9coBGTXOr5a2Issa8

    Score
    8/10

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks