General
-
Target
CAR-DUPE.exe
-
Size
20.4MB
-
Sample
240219-fxjecsaa3x
-
MD5
5f6b4a443027a7e0df6c0240274c8c9a
-
SHA1
90b455f8684dbcb1b6088cc7d65fe18ebed4ff0c
-
SHA256
517d850985dd88257a0d165ae83dbc83895878efe5766f06ded1923b55086753
-
SHA512
bb9d18f2298c99f885975b113f96284e303a7493c59275c4bc1a6ab7858773d7857794f9e6e651104ae20cee1708cf3c1670eb1b6fe84291c1a40b45ec969e6a
-
SSDEEP
393216:Ph9Sl6eQnFywWqnsurEUWjQeoP1JpnjJG+o7WOKXyYv7:J9kQFyksdbFe1njQ+o7EyE
Behavioral task
behavioral1
Sample
CAR-DUPE.exe
Resource
win11-20240214-en
Behavioral task
behavioral2
Sample
CAR-DUPE.pyc
Resource
win11-20240214-en
Malware Config
Targets
-
-
Target
CAR-DUPE.exe
-
Size
20.4MB
-
MD5
5f6b4a443027a7e0df6c0240274c8c9a
-
SHA1
90b455f8684dbcb1b6088cc7d65fe18ebed4ff0c
-
SHA256
517d850985dd88257a0d165ae83dbc83895878efe5766f06ded1923b55086753
-
SHA512
bb9d18f2298c99f885975b113f96284e303a7493c59275c4bc1a6ab7858773d7857794f9e6e651104ae20cee1708cf3c1670eb1b6fe84291c1a40b45ec969e6a
-
SSDEEP
393216:Ph9Sl6eQnFywWqnsurEUWjQeoP1JpnjJG+o7WOKXyYv7:J9kQFyksdbFe1njQ+o7EyE
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
-
-
Target
CAR-DUPE.pyc
-
Size
50KB
-
MD5
4fb54399b8b01a36fc378efc2c92f4ce
-
SHA1
13348cb9b6b1658ef4df6eddde4bc6cd77c8d4a3
-
SHA256
a0315cb5c3f079d1a639d137794df76e646ef09f83f222cbf76ea3b6fba20669
-
SHA512
eaf9432cf8a20b4471b5a8d1b9dc4385e80740979fa8dba6684e95312bf94b9b2fb085949f34bd6a18e87599a099fc97b4488bffbf4532c9858d0ef43cae6b48
-
SSDEEP
1536:t9MWm+e3PL7xTsjmbQhlewt66ohhuDlhLxGuUSgeC:Boz7xTZQr7A6ohgUaC
Score3/10 -