General
- Target fd8059b06f53e9ccac53b1252698b0c7f70f6818c087b984d4422ca1f6b94ea6.exe
- Size 71.3MB
- Sample240119-bn7ndadef7
- SHA256 fd8059b06f53e9ccac53b1252698b0c7f70f6818c087b984d4422ca1f6b94ea6
- MD5 65abecd9d4eab0048f0ef67a660c1edc
- SHA1 8159e27cc52129b51c41dff996243eeb604a4129
- SHA512 76ecb58c10f3332a26a1601c9a61e8bbb719fcb813173381e5f28718c95711cb50432109b8447f5e9b00a41856815f6093b16a44f1cfef177e05c1d7ea90a92f
- SSDEEP 1572864:Z4/4rzOchPJt8P77r/4UkZNQyaSz3Ek+yvDuWjXMzbP0TdVwGz7:ekqcdb0PwUknBjzvDHXMzQ/7
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DarkAdventures.exe
Resource
win7-20231215-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
DarkAdventures.exe
Resource
win10-20231215-en
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
DarkAdventures.exe
Resource
win10v2004-20231215-en
12 signatures
150 seconds
Behavioral task
behavioral4
Sample
DarkAdventures.exe
Resource
win11-20231215-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target DarkAdventures.exe
- Size 139.5MB
- SHA256 56a16d12935731e5ea24968320133bb7eaac3be2c02103148a13ce4582a8c887
- MD5 4acca1c0306c258f19f673c0fc1ae424
- SHA1 5292070989b70618447285a32fbb63f08a527f5d
- SHA512 1a27cdfcf89f8e7f898cb844862483360b70e9a929db48de37143ea4d9bd8fcd549de4ce8d2413e82fc213c58a5dd624331984dc4e9fd23fc7466d46f7f1aa4f
- SSDEEP 786432:314w5ThzHwQBgmoLWv+K18nCzKdo5DTdvfMQr6SSmPuvh8tSIW68:314kpHwQjCWv+K18CedmVvEQEpcJW
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.