General

  • Target

    02aa4aac6bc417b73d6ea452194252fe

  • Size

    786KB

  • Sample

    231229-yyefxahfam

  • MD5

    02aa4aac6bc417b73d6ea452194252fe

  • SHA1

    69d4e8942d6c3891a06b988ada2cb8a75fc738b5

  • SHA256

    d8c56946b65ffcf4b6aa2bd510fefb626edcc2a135c07e2f0175686aa0e588e6

  • SHA512

    c241466c03983fa0809836d61db44c640c2ae16d8349723327b6bf0cc5267c69ecf4c91c74ba7e948655ff3b4bf9dd72046e11d4d9a123f35f1dde40e63c4158

  • SSDEEP

    12288:vyxPJa2s86jofrWEuxjcZxyPq8tf8sQ+PRtj3lDsmMHj3N6eiaFmhL+JigD:vyxPJ/s86szWEuKiflOmMDhPEhL+lD

Score
10/10

Malware Config

Targets

    • Target

      02aa4aac6bc417b73d6ea452194252fe

    • Size

      786KB

    • MD5

      02aa4aac6bc417b73d6ea452194252fe

    • SHA1

      69d4e8942d6c3891a06b988ada2cb8a75fc738b5

    • SHA256

      d8c56946b65ffcf4b6aa2bd510fefb626edcc2a135c07e2f0175686aa0e588e6

    • SHA512

      c241466c03983fa0809836d61db44c640c2ae16d8349723327b6bf0cc5267c69ecf4c91c74ba7e948655ff3b4bf9dd72046e11d4d9a123f35f1dde40e63c4158

    • SSDEEP

      12288:vyxPJa2s86jofrWEuxjcZxyPq8tf8sQ+PRtj3lDsmMHj3N6eiaFmhL+JigD:vyxPJ/s86szWEuKiflOmMDhPEhL+lD

    Score
    10/10
    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Uses Tor communications

      Malware can proxy its traffic through Tor for more anonymity.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

System Information Discovery

1
T1082

Command and Control

Proxy

1
T1090

Tasks