Overview

overview

7

Static

static

1

Software_R...ts.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Software_Requirements.exe

  • Size

    111KB

  • Sample

    230223-l66h5shc9x

  • MD5

    5b45640a3bd4fdc32df75aa462f5a167

  • SHA1

    fdc2b61ca7b5c31ba48155d364b8797990e2eaee

  • SHA256

    2e53a6710f04dd84cfd3ac1874a2a61e690568405f192e7cbf8a4df12da334c4

  • SHA512

    3f3e86e14f0a09bafd374da2417452bc69741e14c2d4e1a4b208a94e1a2c9cd3a0c4336ec23e9b046bcad051aac8d6f05d4477cb516c3700b27f21e023106963

  • SSDEEP

    3072:lb4MOYUuQaS+T8sv8X31OjqOjNhOYRbxqH8QW2zCrAZuRs5:wYUuQaS+T8sv8X31OXN1bgl

Score
7/10

Malware Config

Targets

    • Target

      Software_Requirements.exe

    • Size

      111KB

    • MD5

      5b45640a3bd4fdc32df75aa462f5a167

    • SHA1

      fdc2b61ca7b5c31ba48155d364b8797990e2eaee

    • SHA256

      2e53a6710f04dd84cfd3ac1874a2a61e690568405f192e7cbf8a4df12da334c4

    • SHA512

      3f3e86e14f0a09bafd374da2417452bc69741e14c2d4e1a4b208a94e1a2c9cd3a0c4336ec23e9b046bcad051aac8d6f05d4477cb516c3700b27f21e023106963

    • SSDEEP

      3072:lb4MOYUuQaS+T8sv8X31OjqOjNhOYRbxqH8QW2zCrAZuRs5:wYUuQaS+T8sv8X31OXN1bgl

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks