Resubmissions

23-12-2023 11:53

231223-n2sgtsafd5 7

23-12-2023 11:46

231223-nxfbpsgabr 7

23-12-2023 11:38

231223-nrpcesffhn 7

23-12-2023 11:06

231223-m7hn5shdb6 3

23-12-2023 10:42

231223-mrq1ksegeq 7

General

  • Target

    updater.exe

  • Size

    62.3MB

  • Sample

    231223-mrq1ksegeq

  • MD5

    91ea9c72059f52e9e0769fff4d76ca5d

  • SHA1

    3ce72eefb89093b32dce452d03b46a713c894cf7

  • SHA256

    e811567264dd128af6efa83239cf708c19e2b2448f10ecff11273494636f9ded

  • SHA512

    fbf8d4669e15c782b83aff1cdca6f02d6166641a3fe3ada94e23b5123f36f082670b6aaad83f34c0259aef4dbbc2ef2501732e8d78c3548659259c70edf71d7d

  • SSDEEP

    1572864:hm6aqeAMcLGXdHPMNMLpZyIdiBcQ60E8z:86aZAuNHPfLDjih60E8z

Score
7/10

Malware Config

Targets

    • Target

      updater.exe

    • Size

      62.3MB

    • MD5

      91ea9c72059f52e9e0769fff4d76ca5d

    • SHA1

      3ce72eefb89093b32dce452d03b46a713c894cf7

    • SHA256

      e811567264dd128af6efa83239cf708c19e2b2448f10ecff11273494636f9ded

    • SHA512

      fbf8d4669e15c782b83aff1cdca6f02d6166641a3fe3ada94e23b5123f36f082670b6aaad83f34c0259aef4dbbc2ef2501732e8d78c3548659259c70edf71d7d

    • SSDEEP

      1572864:hm6aqeAMcLGXdHPMNMLpZyIdiBcQ60E8z:86aZAuNHPfLDjih60E8z

    Score
    7/10
    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks