General
-
Target
Jefutyl.zip
-
Size
38KB
-
Sample
231009-1p2wysaf75
-
MD5
46ad12d7699b3f9a0ce5f70b08324677
-
SHA1
4b3950b2a378661310472427acaf26272373ed21
-
SHA256
3fb1c3589b3a7636337ae5284974f79f99e4c015977a4fa1eeeeb42d79590181
-
SHA512
d455cd28d8365380494f2ed8f59cf99fcd17dba3b94efe558d307b95abf7e232e5b17ad47f1fb068d4e3bec7214fa88e71fbb8203d1728cfe0371c5013d8d5ef
-
SSDEEP
768:Q6cNV9G4WCsEimmJFLzW/6/RDFC+cPn22xHoMvBhw1gFakQdloivG/ERKjT:ZC1WlFw6/pPUxTw1cakQd6ivbRKjT
Behavioral task
behavioral1
Sample
Jefutyl.zip
Resource
win10v2004-20230915-en
Malware Config
Extracted
phemedrone
https://api.telegram.org/bot6421901210:AAErC913wmPS9T_-XJrvOWFdTxw2TkS248A/sendMessage?chat_id=5896425070
Targets
-
-
Target
Jefutyl.zip
-
Size
38KB
-
MD5
46ad12d7699b3f9a0ce5f70b08324677
-
SHA1
4b3950b2a378661310472427acaf26272373ed21
-
SHA256
3fb1c3589b3a7636337ae5284974f79f99e4c015977a4fa1eeeeb42d79590181
-
SHA512
d455cd28d8365380494f2ed8f59cf99fcd17dba3b94efe558d307b95abf7e232e5b17ad47f1fb068d4e3bec7214fa88e71fbb8203d1728cfe0371c5013d8d5ef
-
SSDEEP
768:Q6cNV9G4WCsEimmJFLzW/6/RDFC+cPn22xHoMvBhw1gFakQdloivG/ERKjT:ZC1WlFw6/pPUxTw1cakQd6ivbRKjT
Score10/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-