Overview

overview

7

Static

static

3

Guardian-3.5.0.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Guardian-3.5.0.exe

  • Size

    9.3MB

  • Sample

    240111-gxb6qabdd4

  • MD5

    73485384285e77255857472df8510220

  • SHA1

    c32d3726eb9c5f456e5978ad979803732c50c167

  • SHA256

    3429c0a3a677d73c3014417855819a9d1145c0c171d01231371038f04cd49ba3

  • SHA512

    63ca91990aae81519cf74882ccbc13e1506ac5bcde4a1c7c487840701dc7200566fee0637dccbdb3ab8869f4372af8e70d2ef76a1430b0289d04b1dcd5f613b0

  • SSDEEP

    196608:SjbXbm3AbT/9bcLz3S1bAXnOQTsYjucFh9cjcZvy3EdT:WLm3AbTlI3S1b2npduqh+oKQT

Score
7/10
pyinstallerupx

Malware Config

Targets

    • Target

      Guardian-3.5.0.exe

    • Size

      9.3MB

    • MD5

      73485384285e77255857472df8510220

    • SHA1

      c32d3726eb9c5f456e5978ad979803732c50c167

    • SHA256

      3429c0a3a677d73c3014417855819a9d1145c0c171d01231371038f04cd49ba3

    • SHA512

      63ca91990aae81519cf74882ccbc13e1506ac5bcde4a1c7c487840701dc7200566fee0637dccbdb3ab8869f4372af8e70d2ef76a1430b0289d04b1dcd5f613b0

    • SSDEEP

      196608:SjbXbm3AbT/9bcLz3S1bAXnOQTsYjucFh9cjcZvy3EdT:WLm3AbTlI3S1b2npduqh+oKQT

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix

Tasks