Extracted

• • Target

    shit.exe

  • Size

    5.3MB

  • MD5

    daffa640a69186627d8c2334901f1b86

  • SHA1

    3c7daeed595df7100ae082c41677178bec1bbaa2

  • SHA256

    b280e418cc13c8f1efe66c8c5f4b83e0a544ddbb9d0c460e24d279b93a22c5b3

  • SHA512

    1c1022cc5064295d5201f72a1fb2a164bfc5388ef2b8cf0d70f336557f6125c6dc104056dcb5057505243e46446109992199d2a12d9b0a916e3963d1408950cd

  • SSDEEP

    98304:f6CJJsPG4aQxuM0HsYspanM2ubkbBVxOnZUNlriiCSqBhYAYSq+h/Vsd/xi8Expe:vgpxl0HsYspanM2ubkbBVxOZymiCSqBo

  Score

  10^/10

  aresloaderloader

  • AresLoader

    AresLoader is a loader and downloader written in C++.

    loaderaresloader

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1