Overview

overview

6

Static

static

1

training.html

windows7-x64

6

training.html

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    training

  • Size

    62KB

  • Sample

    230630-kesmjagf56

  • MD5

    d90325725f566091e2eb739437e68e22

  • SHA1

    a5cd62a7723bd7bb6b546324024a8a40279451a8

  • SHA256

    f2bb315468c6699a56410243654e5abf8185fa3169db25b5fa6c32dbcd8ba0e5

  • SHA512

    a1b1f704f56be66d6439744bee8eadab0818a31ca47f31ce67fedb65b8dc6646b425855d15bc860944572eebfd71f143ec77f98a7af2d7d7dd5a4b6448fb7e32

  • SSDEEP

    768:iVlHjmVg9oRebNZ444x4Q4Frpj9Uq8fG9OaqL/WP35IFv2c0/bq:2lBZ444x4Q4FrpjyffG9Tfh0

Score
6/10
persistence

Malware Config

Targets

    • Target

      training

    • Size

      62KB

    • MD5

      d90325725f566091e2eb739437e68e22

    • SHA1

      a5cd62a7723bd7bb6b546324024a8a40279451a8

    • SHA256

      f2bb315468c6699a56410243654e5abf8185fa3169db25b5fa6c32dbcd8ba0e5

    • SHA512

      a1b1f704f56be66d6439744bee8eadab0818a31ca47f31ce67fedb65b8dc6646b425855d15bc860944572eebfd71f143ec77f98a7af2d7d7dd5a4b6448fb7e32

    • SSDEEP

      768:iVlHjmVg9oRebNZ444x4Q4Frpj9Uq8fG9OaqL/WP35IFv2c0/bq:2lBZ444x4Q4FrpjyffG9Tfh0

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks