General

  • Target

    204b660d3be6b8c0339b96dd6ee86e60.bin

  • Size

    17.7MB

  • Sample

    240214-bg49nsef33

  • MD5

    204b660d3be6b8c0339b96dd6ee86e60

  • SHA1

    c28798f456439f86ae7d84919dd7dcedf6bb98fa

  • SHA256

    5d23112a6aba854805c9413bedffc90d084ca180f5535f622dd481d3530e5f59

  • SHA512

    c8c0a358ba5f57d52818c6c4047c3eabb29ead8d1ad190041f5c34e32e2608a642707557d0ef0921a1f20a78ae9ab5fcc82d4139229f32a6fc5771fc7ea76d55

  • SSDEEP

    393216:CqPnLFXlrSQ8DOETgsvfGF3gePuiEvE75RGE8W6q:HPLFXNSQhEI/P77t82

Malware Config

Targets

    • Target

      204b660d3be6b8c0339b96dd6ee86e60.bin

    • Size

      17.7MB

    • MD5

      204b660d3be6b8c0339b96dd6ee86e60

    • SHA1

      c28798f456439f86ae7d84919dd7dcedf6bb98fa

    • SHA256

      5d23112a6aba854805c9413bedffc90d084ca180f5535f622dd481d3530e5f59

    • SHA512

      c8c0a358ba5f57d52818c6c4047c3eabb29ead8d1ad190041f5c34e32e2608a642707557d0ef0921a1f20a78ae9ab5fcc82d4139229f32a6fc5771fc7ea76d55

    • SSDEEP

      393216:CqPnLFXlrSQ8DOETgsvfGF3gePuiEvE75RGE8W6q:HPLFXNSQhEI/P77t82

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks