Overview

overview

8

Static

static

41a6c0ca81...3d.exe

windows7-x64

8

41a6c0ca81...3d.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    41a6c0ca811d683d5c4c94d8c5611420b9c4e635398bbd116b845ada9f7cdb3d

  • Size

    32KB

  • Sample

    221128-fhjftabh2x

  • MD5

    f770cb1272101345f8c040dd4714ac37

  • SHA1

    50387d97ddfdbe605a085226403f873af4fbd71f

  • SHA256

    41a6c0ca811d683d5c4c94d8c5611420b9c4e635398bbd116b845ada9f7cdb3d

  • SHA512

    d7936a0aaaab57e1d0bf63b7e6930bb745d55963411bda992e384121c0804cf13ba98c11cca0cbcdb707faa94dc667fb1f56013655ccc561edf3a77e7963785b

  • SSDEEP

    768:IZ71cnyyM4AaX80naUU5Zj0taG4KKUzNd:871ETKsDnAS4KpNd

Score
8/10

Malware Config

Targets

    • Target

      41a6c0ca811d683d5c4c94d8c5611420b9c4e635398bbd116b845ada9f7cdb3d

    • Size

      32KB

    • MD5

      f770cb1272101345f8c040dd4714ac37

    • SHA1

      50387d97ddfdbe605a085226403f873af4fbd71f

    • SHA256

      41a6c0ca811d683d5c4c94d8c5611420b9c4e635398bbd116b845ada9f7cdb3d

    • SHA512

      d7936a0aaaab57e1d0bf63b7e6930bb745d55963411bda992e384121c0804cf13ba98c11cca0cbcdb707faa94dc667fb1f56013655ccc561edf3a77e7963785b

    • SSDEEP

      768:IZ71cnyyM4AaX80naUU5Zj0taG4KKUzNd:871ETKsDnAS4KpNd

    Score
    8/10

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks