General

  • Target

    Y2hlc2Nh-1.exe

  • Size

    33.8MB

  • Sample

    240220-11va9agb68

  • MD5

    8f86d56684e59bfc4ee69ff41c6435b8

  • SHA1

    5f256f3c2af2f5b2541cb02127928af29a9ac82d

  • SHA256

    5b7c4512a2795180b8499fb1afd65cadadc1ff5c3687e0333fcba23d830838b5

  • SHA512

    fd65c946c814662bec92b1a02349927042b07345c525516e744d719201b218cb354d45e2bf37be483151799624c791ce9a86fddeb7594e03a0303d9c21fc38b0

  • SSDEEP

    393216:5xkP17VAL+ojYE2ggUORJs3Rt2a8sIh+4Y2OztcHcy7:5xyxAUQtc63/jjGHcy7

Score
6/10

Malware Config

Targets

    • Target

      Y2hlc2Nh-1.exe

    • Size

      33.8MB

    • MD5

      8f86d56684e59bfc4ee69ff41c6435b8

    • SHA1

      5f256f3c2af2f5b2541cb02127928af29a9ac82d

    • SHA256

      5b7c4512a2795180b8499fb1afd65cadadc1ff5c3687e0333fcba23d830838b5

    • SHA512

      fd65c946c814662bec92b1a02349927042b07345c525516e744d719201b218cb354d45e2bf37be483151799624c791ce9a86fddeb7594e03a0303d9c21fc38b0

    • SSDEEP

      393216:5xkP17VAL+ojYE2ggUORJs3Rt2a8sIh+4Y2OztcHcy7:5xyxAUQtc63/jjGHcy7

    Score
    6/10
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks