Overview

overview

7

Static

static

3

main.exe

windows7-x64

7

main.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    main.exe

  • Size

    15.3MB

  • Sample

    230522-t8pbmscb8w

  • MD5

    3420067dd629d73f8675b63722043d3c

  • SHA1

    42c49c1fb1ef685bf1ac21bc5eda7bbe2645c1c2

  • SHA256

    9020f10d485c638a686cd6373ec581d0c58acdd7c9bd8e60ef62ab62f09adbce

  • SHA512

    0634cf5fcbaf680108b9713cfee06b85f7a2d62ef52317565cf09b289d6d6dfde1862520e32086ed0ccc387c3277901bfba15a97212be57ce2f44c5f481ee1e4

  • SSDEEP

    393216:wu7L/Z+y0LLNh74hCm9c5hlE1/m3pCdPN85Wa3QuWqVU/Px7t4Q:wCLB+bPjsMiEh+KCX3a3QuLm/Y

Score
7/10
pyinstaller

Malware Config

Targets

    • Target

      main.exe

    • Size

      15.3MB

    • MD5

      3420067dd629d73f8675b63722043d3c

    • SHA1

      42c49c1fb1ef685bf1ac21bc5eda7bbe2645c1c2

    • SHA256

      9020f10d485c638a686cd6373ec581d0c58acdd7c9bd8e60ef62ab62f09adbce

    • SHA512

      0634cf5fcbaf680108b9713cfee06b85f7a2d62ef52317565cf09b289d6d6dfde1862520e32086ed0ccc387c3277901bfba15a97212be57ce2f44c5f481ee1e4

    • SSDEEP

      393216:wu7L/Z+y0LLNh74hCm9c5hlE1/m3pCdPN85Wa3QuWqVU/Px7t4Q:wCLB+bPjsMiEh+KCX3a3QuLm/Y

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks