General

  • Target

    loader.exe

  • Size

    18.5MB

  • Sample

    231029-whfb6agg2x

  • MD5

    05bb4ad87eb72a2975e2a73afb1dcb48

  • SHA1

    f3426fdd2ed3f6e3e8f924ae4c018d0cab70562d

  • SHA256

    26ed6713d845c8e93b50407c5272c6cb8b48646467f76d09171fa3e4b1ee3b00

  • SHA512

    bf6753548a087e2d96234e6d06735da1ef2c510482fee8d774ff8c5a6e1a56f39b1bcc46b18dd89e2bf41726a58363773961c92242e504e47ebc2d50c4d714bc

  • SSDEEP

    393216:9QNP9ZLr7M5liT9c5hlERIAdZYycDy5rjuXX5sro3f3j+nW:9QjZ37M5lkEhkIAdZiy5+Xi+3

Score
7/10

Malware Config

Targets

    • Target

      loader.exe

    • Size

      18.5MB

    • MD5

      05bb4ad87eb72a2975e2a73afb1dcb48

    • SHA1

      f3426fdd2ed3f6e3e8f924ae4c018d0cab70562d

    • SHA256

      26ed6713d845c8e93b50407c5272c6cb8b48646467f76d09171fa3e4b1ee3b00

    • SHA512

      bf6753548a087e2d96234e6d06735da1ef2c510482fee8d774ff8c5a6e1a56f39b1bcc46b18dd89e2bf41726a58363773961c92242e504e47ebc2d50c4d714bc

    • SSDEEP

      393216:9QNP9ZLr7M5liT9c5hlERIAdZYycDy5rjuXX5sro3f3j+nW:9QjZ37M5lkEhkIAdZiy5+Xi+3

    Score
    7/10
    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks