General
-
Target
Akrienpremium40exe.exe
-
Size
4.3MB
-
Sample
240106-l5hexsdcan
-
MD5
8af52c532dee095626de6c3ae0b182bb
-
SHA1
fa981b39bf3a83e2f68b9f95cb4a968a0fc99d23
-
SHA256
4a6fa79f84ec213fe6c3a5776a878a2e5734d96819a9bbc865b00bc966cdf976
-
SHA512
8be5a9d7209b01b3f4e758a63cd0dc272fb33bb53370834f9c564633991e9cce3d8cc9d6efdb3d1554ac209adc6a34afe8db18dbe86b25395e89be590c68e76a
-
SSDEEP
49152:g/5tJDBRnrQkbB1CjaorTkjf5O5rihkRbxdkkYgpX6tkWuiZMh5WEWkwYTMj:ab6SROk7AOkwB
Behavioral task
behavioral1
Sample
Akrienpremium40exe.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Akrienpremium40exe.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
lucastealer
https://api.telegram.org/bot6087457936:AAHy4hAAAw4TgaA5qmU8dL7mR7D5TTkyy_o
Targets
-
-
Target
Akrienpremium40exe.exe
-
Size
4.3MB
-
MD5
8af52c532dee095626de6c3ae0b182bb
-
SHA1
fa981b39bf3a83e2f68b9f95cb4a968a0fc99d23
-
SHA256
4a6fa79f84ec213fe6c3a5776a878a2e5734d96819a9bbc865b00bc966cdf976
-
SHA512
8be5a9d7209b01b3f4e758a63cd0dc272fb33bb53370834f9c564633991e9cce3d8cc9d6efdb3d1554ac209adc6a34afe8db18dbe86b25395e89be590c68e76a
-
SSDEEP
49152:g/5tJDBRnrQkbB1CjaorTkjf5O5rihkRbxdkkYgpX6tkWuiZMh5WEWkwYTMj:ab6SROk7AOkwB
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-