General
-
Target
204b660d3be6b8c0339b96dd6ee86e60.bin
-
Size
17.7MB
-
Sample
240214-bg49nsef33
-
MD5
204b660d3be6b8c0339b96dd6ee86e60
-
SHA1
c28798f456439f86ae7d84919dd7dcedf6bb98fa
-
SHA256
5d23112a6aba854805c9413bedffc90d084ca180f5535f622dd481d3530e5f59
-
SHA512
c8c0a358ba5f57d52818c6c4047c3eabb29ead8d1ad190041f5c34e32e2608a642707557d0ef0921a1f20a78ae9ab5fcc82d4139229f32a6fc5771fc7ea76d55
-
SSDEEP
393216:CqPnLFXlrSQ8DOETgsvfGF3gePuiEvE75RGE8W6q:HPLFXNSQhEI/P77t82
Behavioral task
behavioral1
Sample
204b660d3be6b8c0339b96dd6ee86e60.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
204b660d3be6b8c0339b96dd6ee86e60.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
204b660d3be6b8c0339b96dd6ee86e60.bin
-
Size
17.7MB
-
MD5
204b660d3be6b8c0339b96dd6ee86e60
-
SHA1
c28798f456439f86ae7d84919dd7dcedf6bb98fa
-
SHA256
5d23112a6aba854805c9413bedffc90d084ca180f5535f622dd481d3530e5f59
-
SHA512
c8c0a358ba5f57d52818c6c4047c3eabb29ead8d1ad190041f5c34e32e2608a642707557d0ef0921a1f20a78ae9ab5fcc82d4139229f32a6fc5771fc7ea76d55
-
SSDEEP
393216:CqPnLFXlrSQ8DOETgsvfGF3gePuiEvE75RGE8W6q:HPLFXNSQhEI/P77t82
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-