General
- Target stub2.exe
- Size 20.4MB
- Sample221231-gr2jeshc62
- SHA256 82b53444cb1607da0d82f371e6976f765a236a1468e88f6385ee24f2e6f5d1bb
- MD5 29404c47f7fdab045b3ec0404563a03d
- SHA1 04a8cb67707728a82df5d8193647ab01761d061c
- SHA512 d3e60bdcaec488cf13bf3b9a3cfbd67e6e044337676d22b7048040721bbc54c0428763b5d8ccdb1afc7856f977681054eef5e7d72ba91ae1690eeda5411a1747
- SSDEEP 393216:MflgwHGyvAhWIzA9QsrloKn3e/m3pZeWG2QXBv8SxRoJNW8DVMF3PV:Mflbmyv6WLqbdKZMv/4NW8D2F3P
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Behavioral task
behavioral1
Sample
stub2.exe
Resource
win7-20220812-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
stub2.exe
Resource
win10v2004-20220901-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target stub2.exe
- Size 20.4MB
- SHA256 82b53444cb1607da0d82f371e6976f765a236a1468e88f6385ee24f2e6f5d1bb
- MD5 29404c47f7fdab045b3ec0404563a03d
- SHA1 04a8cb67707728a82df5d8193647ab01761d061c
- SHA512 d3e60bdcaec488cf13bf3b9a3cfbd67e6e044337676d22b7048040721bbc54c0428763b5d8ccdb1afc7856f977681054eef5e7d72ba91ae1690eeda5411a1747
- SSDEEP 393216:MflgwHGyvAhWIzA9QsrloKn3e/m3pZeWG2QXBv8SxRoJNW8DVMF3PV:Mflbmyv6WLqbdKZMv/4NW8D2F3P
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.