Overview

overview

7

Static

static

3

loadez.exe

windows7-x64

7

loadez.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    loadez.exe

  • Size

    6.1MB

  • Sample

    230313-w9h75adf6w

  • MD5

    70eee3a963494c4319bb8e8bf95114c1

  • SHA1

    ef8611500b582a7c1e97d897c76e1610626b5811

  • SHA256

    89418a2820d95fe6be32e0083835f5a133e6af2634f71e0b9b2f7c90b126c264

  • SHA512

    8eeca18d59abfbca4ff21e4b4aae01c9ec7c0c891e22b08b7ad209667f7895b283d5befd9ddf67e58b90eaef65ff577c14ac74e99541ac13bf2b1a1e744500b3

  • SSDEEP

    98304:Vm8rswZh2uW5MI0md9g+Di2O7/Xuy/+7F+7cETACVk0rNk5Dn7:VmNwZEL2Vmd6+Di2c/f/+ScEjtpyDn

Score
7/10
pyinstaller

Malware Config

Targets

    • Target

      loadez.exe

    • Size

      6.1MB

    • MD5

      70eee3a963494c4319bb8e8bf95114c1

    • SHA1

      ef8611500b582a7c1e97d897c76e1610626b5811

    • SHA256

      89418a2820d95fe6be32e0083835f5a133e6af2634f71e0b9b2f7c90b126c264

    • SHA512

      8eeca18d59abfbca4ff21e4b4aae01c9ec7c0c891e22b08b7ad209667f7895b283d5befd9ddf67e58b90eaef65ff577c14ac74e99541ac13bf2b1a1e744500b3

    • SSDEEP

      98304:Vm8rswZh2uW5MI0md9g+Di2O7/Xuy/+7F+7cETACVk0rNk5Dn7:VmNwZEL2Vmd6+Di2c/f/+ScEjtpyDn

    Score
    7/10
    pyinstaller

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks