Overview

overview

7

Static

static

3

EXETELLER.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    EXETELLER.exe

  • Size

    6.7MB

  • Sample

    230415-15mrzahe4t

  • MD5

    bb19501db092c35af422999be7cf50cf

  • SHA1

    e2685d42d5fb6ff695756905c456cdd029bd7a10

  • SHA256

    2ad17d2f97b1ca624215b12509edff3081856f160ea996ed3d77a1a8177fe46d

  • SHA512

    ba16b232a66e8f8fb16b255146d031b2433270f0fc6dc01cdd3b5cfe560f35ddafefd179d8214f87393fe71ec3b42bb06e894bd421d49e5993d1e56db133cbed

  • SSDEEP

    196608:uDG1rdQmRJ8dA6lbuVaycBIGpEooY1CksniK:VdQuslbl9NoKvXK

Score
7/10
pyinstaller

Malware Config

Targets

    • Target

      EXETELLER.exe

    • Size

      6.7MB

    • MD5

      bb19501db092c35af422999be7cf50cf

    • SHA1

      e2685d42d5fb6ff695756905c456cdd029bd7a10

    • SHA256

      2ad17d2f97b1ca624215b12509edff3081856f160ea996ed3d77a1a8177fe46d

    • SHA512

      ba16b232a66e8f8fb16b255146d031b2433270f0fc6dc01cdd3b5cfe560f35ddafefd179d8214f87393fe71ec3b42bb06e894bd421d49e5993d1e56db133cbed

    • SSDEEP

      196608:uDG1rdQmRJ8dA6lbuVaycBIGpEooY1CksniK:VdQuslbl9NoKvXK

    Score
    7/10

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix

Tasks