Overview

overview

7

Static

static

3

ESPHome-Fl...64.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ESPHome-Flasher-1.4.0-Windows-x64.exe

  • Size

    18.4MB

  • Sample

    230604-z99xmadg77

  • MD5

    c66abdf3b8e316a6e6bde6afcdd60c7d

  • SHA1

    ac64fe3bdc9c5baff2cf9060e8a9f8fa36d35ccd

  • SHA256

    1fde3b0d854fa4767aa453be90d428ddbf5a8a049a459188e721b26ac08751ed

  • SHA512

    1479d839bb512915eb09c1183c030f572aeeff057ada1c97d984da442aaf1aa19f7b6334536a6dcc2d598cc227071e5246d1527ef1f3fb31e54324367c92edd4

  • SSDEEP

    393216:SlwQtcXInEroXgfEqirRRoVWISpyjI75gcwSVnUw/tfaxYqR8H9stV228nXCG:S+Qa4ErUCwvFI3jaKcVx/pEjvJ

Score
7/10
persistencepyinstaller

Malware Config

Targets

    • Target

      ESPHome-Flasher-1.4.0-Windows-x64.exe

    • Size

      18.4MB

    • MD5

      c66abdf3b8e316a6e6bde6afcdd60c7d

    • SHA1

      ac64fe3bdc9c5baff2cf9060e8a9f8fa36d35ccd

    • SHA256

      1fde3b0d854fa4767aa453be90d428ddbf5a8a049a459188e721b26ac08751ed

    • SHA512

      1479d839bb512915eb09c1183c030f572aeeff057ada1c97d984da442aaf1aa19f7b6334536a6dcc2d598cc227071e5246d1527ef1f3fb31e54324367c92edd4

    • SSDEEP

      393216:SlwQtcXInEroXgfEqirRRoVWISpyjI75gcwSVnUw/tfaxYqR8H9stV228nXCG:S+Qa4ErUCwvFI3jaKcVx/pEjvJ

    Score
    7/10
    persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops Chrome extension

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks