General

  • Target

    ImageLoggerMaker.exe

  • Size

    26.3MB

  • Sample

    230205-qre5vshf97

  • MD5

    ede0c8371b7482c2929e823f1eb39623

  • SHA1

    13b01052266431b1a9ac19272ab0796fddad7e4a

  • SHA256

    234fddc1f667bc45d10cd7b7cd2dcfd3685da04be069aeaa75596e4f46fff3df

  • SHA512

    012126ba0a5a8aae7752f2c9dcc5933000d45414063ef700cd18510263a5350663874096effd1fcd43982b2dbe6f4537a616efe8667d3800f48f6eb04518c2c3

  • SSDEEP

    393216:/ZAlmK1Ft6y6UslVSt/ZOce/m3p8Bz8aS02fRz6bJW84WEcL6XXbke:/WlmK1F09U+4LMK2rgzmW84WEcWHz

Score
7/10

Malware Config

Targets

    • Target

      ImageLoggerMaker.exe

    • Size

      26.3MB

    • MD5

      ede0c8371b7482c2929e823f1eb39623

    • SHA1

      13b01052266431b1a9ac19272ab0796fddad7e4a

    • SHA256

      234fddc1f667bc45d10cd7b7cd2dcfd3685da04be069aeaa75596e4f46fff3df

    • SHA512

      012126ba0a5a8aae7752f2c9dcc5933000d45414063ef700cd18510263a5350663874096effd1fcd43982b2dbe6f4537a616efe8667d3800f48f6eb04518c2c3

    • SSDEEP

      393216:/ZAlmK1Ft6y6UslVSt/ZOce/m3p8Bz8aS02fRz6bJW84WEcL6XXbke:/WlmK1F09U+4LMK2rgzmW84WEcWHz

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks