Resubmissions

18/03/2023, 01:01

230318-bddmjsaf776

17/03/2023, 23:06

230317-23cpnacd5t8

General

  • Target
    Documents-invoice-plan_032023.exe
  • Size 1.5MB
  • Sample230318-bddmjsaf77
  • SHA256 7572b5b6b1f0ea8e857de568898cf97139c4e5237b835c61fea7d91a6f1155fb
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Targets

    • Target
      Documents-invoice-plan_032023.exe
    • Size 1.5MB
    • SHA256 7572b5b6b1f0ea8e857de568898cf97139c4e5237b835c61fea7d91a6f1155fb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    6/10
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks