Overview

overview

8

Static

static

3

a3d1ef8218...a5.dll

windows7-x64

8

a3d1ef8218...a5.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a3d1ef821849f015365076467994986ebf47905ffcc4f16761d222e1155abd10ba229aa11e70694c70523e9cbfd0eba5

  • Size

    364KB

  • Sample

    231005-lpap5sab9x

  • MD5

    264a37b36511c366730fa05b0d4981ff

  • SHA1

    ce2bb3512e614c7b9bef6348aa98a7e59193c759

  • SHA256

    719717c01d82b4a4f96057df19b96b409b74ea122a720784407577b2b41876ab

  • SHA512

    1b1bbab210af682970bcff9d22039fdf6479f2ebad339c2badaee113df02ce3ea25637d9f167fe7effc503195e73524ff91f03a48385cc3b14b28ef4902fae85

  • SSDEEP

    6144:bvRk7oxjteyCowrmMmKJSrwg61KX+u2XY1VtzymngFI/oXy:2mRwlmlr761a2I1VtNngK/oC

Score
8/10

Malware Config

Targets

    • Target

      a3d1ef821849f015365076467994986ebf47905ffcc4f16761d222e1155abd10ba229aa11e70694c70523e9cbfd0eba5

    • Size

      364KB

    • MD5

      264a37b36511c366730fa05b0d4981ff

    • SHA1

      ce2bb3512e614c7b9bef6348aa98a7e59193c759

    • SHA256

      719717c01d82b4a4f96057df19b96b409b74ea122a720784407577b2b41876ab

    • SHA512

      1b1bbab210af682970bcff9d22039fdf6479f2ebad339c2badaee113df02ce3ea25637d9f167fe7effc503195e73524ff91f03a48385cc3b14b28ef4902fae85

    • SSDEEP

      6144:bvRk7oxjteyCowrmMmKJSrwg61KX+u2XY1VtzymngFI/oXy:2mRwlmlr761a2I1VtNngK/oC

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks