Overview

overview

8

Static

static

3

Overwatch ...er.exe

windows7-x64

1

Overwatch ...er.exe

windows10-2004-x64

8

Resubmissions

20-02-2024 15:50

240220-s93d8abe65 8

20-02-2024 15:31

240220-syjgzabc44 8

20-02-2024 15:24

240220-ss225abb57 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Overwatch Server Blocker.exe

  • Size

    248KB

  • Sample

    240220-s93d8abe65

  • MD5

    2dd1ef815043e4cad7a8824bda5749b4

  • SHA1

    ba1ce1ac279195d0d94142ddddf33169730a12f9

  • SHA256

    fe6ef89f60d6ee9658e4a95126daf760ab983996cdc32b11fa7cd222e52059d1

  • SHA512

    b96fa87ac5f7ad14e338f3314e91a5b05b65bcea9affaa4f37ac78385507642a45ee5a3b2237c2fca50ff0dfd9f6a8a42c308e3703fa065544e1fb24160ffb94

  • SSDEEP

    3072:Zg95y39boeOQ9WwzzLjE5UPtJ0zLjE5UZS1VlVo:Zg95c9b/ztPcztZmV

Score
8/10
upx

Malware Config

Targets

    • Target

      Overwatch Server Blocker.exe

    • Size

      248KB

    • MD5

      2dd1ef815043e4cad7a8824bda5749b4

    • SHA1

      ba1ce1ac279195d0d94142ddddf33169730a12f9

    • SHA256

      fe6ef89f60d6ee9658e4a95126daf760ab983996cdc32b11fa7cd222e52059d1

    • SHA512

      b96fa87ac5f7ad14e338f3314e91a5b05b65bcea9affaa4f37ac78385507642a45ee5a3b2237c2fca50ff0dfd9f6a8a42c308e3703fa065544e1fb24160ffb94

    • SSDEEP

      3072:Zg95y39boeOQ9WwzzLjE5UPtJ0zLjE5UZS1VlVo:Zg95c9b/ztPcztZmV

    Score
    8/10
    upx

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks