General
- Target SecuriteInfo.com.Trojan.Mardom.ON.24.25444.6656
- Size 353KB
- Sample230501-ppe7eafe43
- SHA256 bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b
- MD5 3121ecc67e64fdf65b2b3c9f5966ed11
- SHA1 e02765d98dbd9e1a2d3106c5cfc849f91dae49f1
- SHA512 0f974774db1196cc4fcecb0b8e54ac70b67f96db30fe219791d650fdbc354d18cf41bc75de089775fcc11cfc3d5c7fcb762e02ac064d1bb58eebc875670cd795
- SSDEEP 3072:w2drpq3JiL1FBpMVOvnz5R6ipM5XnjBZhHmStRlxFVNt+hcC5fjmP0pzYAzpceSI:wdKGCDRUFv2O16o809bAFz2c0g
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Mardom.ON.24.25444.exe
Resource
win7-20230220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.Mardom.ON.24.25444.exe
Resource
win10v2004-20230220-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.Trojan.Mardom.ON.24.25444.6656
- Size 353KB
- SHA256 bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b
- MD5 3121ecc67e64fdf65b2b3c9f5966ed11
- SHA1 e02765d98dbd9e1a2d3106c5cfc849f91dae49f1
- SHA512 0f974774db1196cc4fcecb0b8e54ac70b67f96db30fe219791d650fdbc354d18cf41bc75de089775fcc11cfc3d5c7fcb762e02ac064d1bb58eebc875670cd795
- SSDEEP 3072:w2drpq3JiL1FBpMVOvnz5R6ipM5XnjBZhHmStRlxFVNt+hcC5fjmP0pzYAzpceSI:wdKGCDRUFv2O16o809bAFz2c0g
- MD5 SHA1 SHA512 SSDEEP
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Accesses Microsoft Outlook profiles
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.