General
-
Target
MacmillanEducationStudent-win32-x64.exe
-
Size
110.3MB
-
Sample
231011-t59s6sad2v
-
MD5
2f22b2ab08eba96b0362ca0266097a03
-
SHA1
79eca25f10059018fcde6853a736436a95ef7032
-
SHA256
62141cce744cc481f21c066c558befe021025ff9f1fc9b0b4a0ee3976d2d3254
-
SHA512
1633d6e99242703b597721da65ab95a1e4567e7ec90a329570cedfa988ad35293c29b033d74253c4e2934c57d36314123450dae99eac2f8d30994448eba6adb7
-
SSDEEP
3145728:jtlNLyoIgL3ppIFcMp8H1K9JImbHD3t44oif48ZR/wOI:plNmCH+1JNbj3t44/fPR/
Static task
static1
Behavioral task
behavioral1
Sample
MacmillanEducationStudent-win32-x64.exe
Resource
win10v2004-20230915-es
Malware Config
Targets
-
-
Target
MacmillanEducationStudent-win32-x64.exe
-
Size
110.3MB
-
MD5
2f22b2ab08eba96b0362ca0266097a03
-
SHA1
79eca25f10059018fcde6853a736436a95ef7032
-
SHA256
62141cce744cc481f21c066c558befe021025ff9f1fc9b0b4a0ee3976d2d3254
-
SHA512
1633d6e99242703b597721da65ab95a1e4567e7ec90a329570cedfa988ad35293c29b033d74253c4e2934c57d36314123450dae99eac2f8d30994448eba6adb7
-
SSDEEP
3145728:jtlNLyoIgL3ppIFcMp8H1K9JImbHD3t44oif48ZR/wOI:plNmCH+1JNbj3t44/fPR/
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-