General

  • Target

    11045912126.zip

  • Size

    4.2MB

  • Sample

    230704-2lcy4ahh25

  • MD5

    4f70031950f1132490dc081b7085e2a3

  • SHA1

    abe7ae36d4b699e27d534d7162d49a6f337d21ee

  • SHA256

    fef1bb518d4ae6b7659851c5b27078a52207c51231daa707f7ef220cba8b4a7b

  • SHA512

    4ef4ba3efeb0661a06ed39ede765e660ec48f619b8ca6c08de30342c8ebc22181172bbb893f3e7c0767999468d5fc4539c168c5563b75bcd897bfdd35a65c7f9

  • SSDEEP

    98304:9xA4s7BuYp7l6ueKvNataR3+6b/ijg12a71OPLibGYIV:9ns7QEJ6gV1R3+oi0117fbGf

Score
6/10

Malware Config

Targets

    • Target

      CAN0601_FACT_URAPBBASFKMCVRZAVGbeqrq.exe

    • Size

      249.9MB

    • MD5

      df5bb837ff6623d2a234cee13da8e5d7

    • SHA1

      654f8bc4a5650501825794a5aa7ebe53369cf9c1

    • SHA256

      3536d3f8cbcf585445d364696c1a8644db128c2623131627049e74648f2f8f6c

    • SHA512

      edbabce30b2676736d3bba0ad3fec07b508a9f3e40f5d62e7ec288f9db0bbee5efcdee2dce1dc2af88ed8bc15e2c62d70fd20ce9a6d8576263c86fd5d617a122

    • SSDEEP

      98304:V+/dg75HmbOIvx1Ot67Aeq57P7nCpV3kyeQ6MyuFVFEKpdo0ESnrh1kcIh1uszge:V+UEA6MYV3k0Txno/5/Tz4m

    Score
    6/10
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target

      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~A75694LPPTS.xml

    • Size

      16KB

    • MD5

      8e27998497215aa04caf5470e6cb7093

    • SHA1

      3d30d2d33b9df4656d4d0a58b00b0c8f3a6f4f75

    • SHA256

      0604388f107d1ed9abbb13912e5cdc2f9a2da8d0e528fbb4546c23b2f08c6f15

    • SHA512

      7ff947b92970f7af8862017ae6cc2e6acf6efa1c1e2ab6d1ad6e1ede7aa3f7c496f44792660dbd284b507598116f290940df431abb65baa27591a08177facdf8

    • SSDEEP

      192:nOoZ9Nyby2sE9jBF6IYiYF84+noPOJB3xZndj73oqp4f2br5hRJz:n59Nyb8E9VF6IYiTPxxZdnoqeChRd

    Score
    1/10

MITRE ATT&CK Matrix

Tasks