Overview

overview

7

Static

static

3

mods.rar.exe

windows7-x64

7

mods.rar.exe

windows10-2004-x64

7

Resubmissions

03/04/2023, 18:47

230403-xe98ssac7w 7

03/04/2023, 18:42

230403-xcs7haac5x 8

03/04/2023, 18:35

230403-w8rg4sge33 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mods.rar.exe

  • Size

    19.2MB

  • Sample

    230403-xe98ssac7w

  • MD5

    a8fa00d1aa4a53a537b2e149c80f906b

  • SHA1

    a05eaf715a527991e5432bbf7c73dbebf168a81f

  • SHA256

    4a98ea386cd7d59c76634feb003f3e046dff85e5a440ec9bf4cc1321ee6887d5

  • SHA512

    0e1029d7e60c33309c5063f083db8005783932c91ac34b7c22c1ff434a6ab58a5be19dc398d6e99323d861bd3d59bce91c431eb68881d9998215f03aeea0b0d4

  • SSDEEP

    393216:mu7L/1a/yjxzKcPjdQusl7QHl9RoWOv+9HnuaMYkEn+4hpdSpD:mCLda/yNzzdQu2QFborvSH3MY5+4o

Score
7/10
pyinstaller

Malware Config

Targets

    • Target

      mods.rar.exe

    • Size

      19.2MB

    • MD5

      a8fa00d1aa4a53a537b2e149c80f906b

    • SHA1

      a05eaf715a527991e5432bbf7c73dbebf168a81f

    • SHA256

      4a98ea386cd7d59c76634feb003f3e046dff85e5a440ec9bf4cc1321ee6887d5

    • SHA512

      0e1029d7e60c33309c5063f083db8005783932c91ac34b7c22c1ff434a6ab58a5be19dc398d6e99323d861bd3d59bce91c431eb68881d9998215f03aeea0b0d4

    • SSDEEP

      393216:mu7L/1a/yjxzKcPjdQusl7QHl9RoWOv+9HnuaMYkEn+4hpdSpD:mCLda/yNzzdQu2QFborvSH3MY5+4o

    Score
    7/10

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks