Overview

overview

7

Static

static

3

Generator.exe

windows7-x64

7

Generator.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Generator.exe

  • Size

    17.7MB

  • Sample

    230611-lmftdahe8v

  • MD5

    dd848f2397b52b73ab191d1e176799fc

  • SHA1

    eadd7d2e00ff732dfe80afd42bf1376efe633232

  • SHA256

    67645680a284d820dc034f0ee5552f19efe96a5c1f8280510d088063c25cb7f9

  • SHA512

    a8a20dfce9bf5bdcd9a362d05d0f87cc3718bd59f564d14df321a0e725e259e2141039eff94dad010293c712e13acd6683f7f33fa5bc90db3d118fbde0889bd8

  • SSDEEP

    393216:nqPnLFXlrjQpDOETgsvfGA4gjNrvEhYKFqwLUW:qPLFXNjQoEYm+RF9

Score
7/10
pyinstallerupx

Malware Config

Targets

    • Target

      Generator.exe

    • Size

      17.7MB

    • MD5

      dd848f2397b52b73ab191d1e176799fc

    • SHA1

      eadd7d2e00ff732dfe80afd42bf1376efe633232

    • SHA256

      67645680a284d820dc034f0ee5552f19efe96a5c1f8280510d088063c25cb7f9

    • SHA512

      a8a20dfce9bf5bdcd9a362d05d0f87cc3718bd59f564d14df321a0e725e259e2141039eff94dad010293c712e13acd6683f7f33fa5bc90db3d118fbde0889bd8

    • SSDEEP

      393216:nqPnLFXlrjQpDOETgsvfGA4gjNrvEhYKFqwLUW:qPLFXNjQoEYm+RF9

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks