Overview

overview

7

Static

static

3

651d91d3eb...4d.exe

windows7-x64

7

651d91d3eb...4d.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    651d91d3ebde3977b10ebadfe0269d4d

  • Size

    9.2MB

  • Sample

    240118-l4qpxahhb3

  • MD5

    651d91d3ebde3977b10ebadfe0269d4d

  • SHA1

    2b8cf23d30ad284da26bad86ffaa9ed2b246b512

  • SHA256

    36ea9c07252aa739c8a8366453f629a5762afc152b32fa358c893ca0233791a6

  • SHA512

    3930c42654d9a9e84b8aa6a500b425beb98df2282415f2654556bdee36ec8821bd7df428d9522c8a695ca9dc2f9a8fd6dd579e05c8f5c21d583b0c4c4276adf6

  • SSDEEP

    196608:R01dh08Tgk7c/ihukxA3f97Y1zO2sPnGMfhReCWJo8i1zwh/:R2dDTfc/YXq3fxY1ranGMbso/NwV

Score
7/10

Malware Config

Targets

    • Target

      651d91d3ebde3977b10ebadfe0269d4d

    • Size

      9.2MB

    • MD5

      651d91d3ebde3977b10ebadfe0269d4d

    • SHA1

      2b8cf23d30ad284da26bad86ffaa9ed2b246b512

    • SHA256

      36ea9c07252aa739c8a8366453f629a5762afc152b32fa358c893ca0233791a6

    • SHA512

      3930c42654d9a9e84b8aa6a500b425beb98df2282415f2654556bdee36ec8821bd7df428d9522c8a695ca9dc2f9a8fd6dd579e05c8f5c21d583b0c4c4276adf6

    • SSDEEP

      196608:R01dh08Tgk7c/ihukxA3f97Y1zO2sPnGMfhReCWJo8i1zwh/:R2dDTfc/YXq3fxY1ranGMbso/NwV

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks