Overview

overview

7

Static

static

3

97da8493ed...a6.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    infected.zip
  • Size 355KB
  • Sample231002-rhp45sbd41
  • SHA256 b0b60edfdd8a95dd2fd955e4966ebb6b9c9b68a4f08bd4857b20077340bccffd
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Targets

    • Target
      97da8493ed1dd6663f1d7bb1d030fe08d5cf207d7cbb6363cbeca31ba39fe1a6
    • Size 408KB
    • SHA256 97da8493ed1dd6663f1d7bb1d030fe08d5cf207d7cbb6363cbeca31ba39fe1a6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Uses the VBS compiler for execution

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks