Overview

overview

7

Static

static

1

4b58988cac...fb.exe

windows7-x64

7

4b58988cac...fb.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4b58988caceefbe6adea5dc33dea2113345f20de82865bdb16cf73ac6359cdfb

  • Size

    90KB

  • Sample

    230418-ng577acg9s

  • MD5

    5bd6330d41a9ae6ab17a4969ba19711d

  • SHA1

    72c5b069c568abfa7cca529f37387d64479d09e5

  • SHA256

    4b58988caceefbe6adea5dc33dea2113345f20de82865bdb16cf73ac6359cdfb

  • SHA512

    54ee80cc8879da580f41e9eb4e691e45154eab027ce466b3ebe1f8e2b9d29c3b69eea4091fc3d991069681cbb572ba762f4b37f4ef146214e2b76e21a2deeb1d

  • SSDEEP

    1536:0MgyNStPY+z0mHkGDc+XQfrWbh8UH9SZ47Qn/a94JQYYTsdm//:tmlY+zlDc+XewH9SZ4uaRt

Score
7/10

Malware Config

Targets

    • Target

      4b58988caceefbe6adea5dc33dea2113345f20de82865bdb16cf73ac6359cdfb

    • Size

      90KB

    • MD5

      5bd6330d41a9ae6ab17a4969ba19711d

    • SHA1

      72c5b069c568abfa7cca529f37387d64479d09e5

    • SHA256

      4b58988caceefbe6adea5dc33dea2113345f20de82865bdb16cf73ac6359cdfb

    • SHA512

      54ee80cc8879da580f41e9eb4e691e45154eab027ce466b3ebe1f8e2b9d29c3b69eea4091fc3d991069681cbb572ba762f4b37f4ef146214e2b76e21a2deeb1d

    • SSDEEP

      1536:0MgyNStPY+z0mHkGDc+XQfrWbh8UH9SZ47Qn/a94JQYYTsdm//:tmlY+zlDc+XewH9SZ4uaRt

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks