General

  • Target

    fa1d61467cb54328b20c376ccf7d21c3.bin

  • Size

    29.8MB

  • Sample

    240203-egk3ksged3

  • MD5

    fa1d61467cb54328b20c376ccf7d21c3

  • SHA1

    b0b6737a306e638f326fe03584623f5335a87d8e

  • SHA256

    670c1f1888c27fa80c8b7f8b03d80e569bf7191a77c6a083e0bd79d950076166

  • SHA512

    cece9211cdcd82ab294d3ecb3957d7efe51e65b0879a049f67988bc0f5daba92c1efac907cceb4f21dd266d7a81a5b712ae999229e55aa37dfd8c54222403a2a

  • SSDEEP

    786432:q29kQ8KKcfqVvIkfqVvIMrxMiPSQHffhu:nkQnKcCVgkCVgc0g34

Score
7/10

Malware Config

Targets

    • Target

      fa1d61467cb54328b20c376ccf7d21c3.bin

    • Size

      29.8MB

    • MD5

      fa1d61467cb54328b20c376ccf7d21c3

    • SHA1

      b0b6737a306e638f326fe03584623f5335a87d8e

    • SHA256

      670c1f1888c27fa80c8b7f8b03d80e569bf7191a77c6a083e0bd79d950076166

    • SHA512

      cece9211cdcd82ab294d3ecb3957d7efe51e65b0879a049f67988bc0f5daba92c1efac907cceb4f21dd266d7a81a5b712ae999229e55aa37dfd8c54222403a2a

    • SSDEEP

      786432:q29kQ8KKcfqVvIkfqVvIMrxMiPSQHffhu:nkQnKcCVgkCVgc0g34

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks