Resubmissions

20-05-2023 17:56

230520-wjcmnadh88 7

20-05-2023 17:51

230520-we7l8sge4t 7

General

  • Target

    New_Badge_Guide.pdf.exe

  • Size

    17.7MB

  • Sample

    230520-wjcmnadh88

  • MD5

    db13bc7146d21a616f51b4799ae2f93f

  • SHA1

    13ee7aad2a761158e72082d22651e634ca91d4b3

  • SHA256

    683ce5a6c98c7214f598ac3a95356f31d9b17f55ca94b292ededb2fe78c7afd1

  • SHA512

    0f25b15de18a332359e476e4998bb661fa207d7668ce2e5812e8415a696622a010228e81a62a1cc403de7f2aba368ac3aacac8977dc592f64b1d37af2f8ab17a

  • SSDEEP

    393216:rqPnLFXlrjQpDOETgsvfGACgIWvEn4DghLSW:+PLFXNjQoEizvQk

Score
7/10

Malware Config

Targets

    • Target

      New_Badge_Guide.pdf.exe

    • Size

      17.7MB

    • MD5

      db13bc7146d21a616f51b4799ae2f93f

    • SHA1

      13ee7aad2a761158e72082d22651e634ca91d4b3

    • SHA256

      683ce5a6c98c7214f598ac3a95356f31d9b17f55ca94b292ededb2fe78c7afd1

    • SHA512

      0f25b15de18a332359e476e4998bb661fa207d7668ce2e5812e8415a696622a010228e81a62a1cc403de7f2aba368ac3aacac8977dc592f64b1d37af2f8ab17a

    • SSDEEP

      393216:rqPnLFXlrjQpDOETgsvfGACgIWvEn4DghLSW:+PLFXNjQoEizvQk

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks