General
-
Target
file.exe
-
Size
3.5MB
-
Sample
230113-xalpmsfd9z
-
MD5
324d9b136da0604eff2668d4c2fb6058
-
SHA1
dd6dc0c2a3d63060b3a3b27bf9920c9d3f83da02
-
SHA256
44514d0d81f82d9e200463cd832add09d88e7ff1eb3571e9120a0e4236c0d49f
-
SHA512
efc5962ce27a1bd6625de60bfad1b23bb76cfe1d23b6f47de845abb787259fe5c8157c9437b01a32753cde437a3ad08c6f2efdd69d4633d0b3a23e113fbcfbf1
-
SSDEEP
98304:CzIUKnKdKDzBzc0p98tSVbixV/R2TRmPBX5zpWwXmBAuP7P7CbM5zD6sILTjblM4:3WV/ssBX5lEDi4osI3jhMSN
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Malware Config
Targets
-
-
Target
file.exe
-
Size
3.5MB
-
MD5
324d9b136da0604eff2668d4c2fb6058
-
SHA1
dd6dc0c2a3d63060b3a3b27bf9920c9d3f83da02
-
SHA256
44514d0d81f82d9e200463cd832add09d88e7ff1eb3571e9120a0e4236c0d49f
-
SHA512
efc5962ce27a1bd6625de60bfad1b23bb76cfe1d23b6f47de845abb787259fe5c8157c9437b01a32753cde437a3ad08c6f2efdd69d4633d0b3a23e113fbcfbf1
-
SSDEEP
98304:CzIUKnKdKDzBzc0p98tSVbixV/R2TRmPBX5zpWwXmBAuP7P7CbM5zD6sILTjblM4:3WV/ssBX5lEDi4osI3jhMSN
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-