General
-
Target
updater.exe
-
Size
62.3MB
-
Sample
231223-mrq1ksegeq
-
MD5
91ea9c72059f52e9e0769fff4d76ca5d
-
SHA1
3ce72eefb89093b32dce452d03b46a713c894cf7
-
SHA256
e811567264dd128af6efa83239cf708c19e2b2448f10ecff11273494636f9ded
-
SHA512
fbf8d4669e15c782b83aff1cdca6f02d6166641a3fe3ada94e23b5123f36f082670b6aaad83f34c0259aef4dbbc2ef2501732e8d78c3548659259c70edf71d7d
-
SSDEEP
1572864:hm6aqeAMcLGXdHPMNMLpZyIdiBcQ60E8z:86aZAuNHPfLDjih60E8z
Static task
static1
Behavioral task
behavioral1
Sample
updater.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
updater.exe
-
Size
62.3MB
-
MD5
91ea9c72059f52e9e0769fff4d76ca5d
-
SHA1
3ce72eefb89093b32dce452d03b46a713c894cf7
-
SHA256
e811567264dd128af6efa83239cf708c19e2b2448f10ecff11273494636f9ded
-
SHA512
fbf8d4669e15c782b83aff1cdca6f02d6166641a3fe3ada94e23b5123f36f082670b6aaad83f34c0259aef4dbbc2ef2501732e8d78c3548659259c70edf71d7d
-
SSDEEP
1572864:hm6aqeAMcLGXdHPMNMLpZyIdiBcQ60E8z:86aZAuNHPfLDjih60E8z
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-