General
-
Target
FivemV3.rar
-
Size
21.4MB
-
Sample
240225-mjyepahf25
-
MD5
a60f12b22c6cbe259f9c3575f80edf9a
-
SHA1
c76a50590886d9b0770257fb3af691bc62146258
-
SHA256
4c74578e5ab8344705e190d98c001496d97a99ba4822a6e311b32c220003981a
-
SHA512
fbe4e01ef45241741b61554f83208ed8821daca5dc97d3371311a97fc98b0d50240031aba8c90b07dfe8df5127b7eb8bb580a022e553700dd05c5c7bc57038f7
-
SSDEEP
393216:EYgne8faqi+il7WVPZ2xaLvpQTomInfK7kri2fDNhF5ph/MDnCP8PCCyEPFsZJ:0zfaqi+i9+cxaKCnOmimPph/MDnZPZy1
Behavioral task
behavioral1
Sample
main.exe
Resource
win10v2004-20240221-de
Behavioral task
behavioral2
Sample
main.pyc
Resource
win10v2004-20240221-de
Malware Config
Targets
-
-
Target
main.exe
-
Size
21.6MB
-
MD5
61f52b4fcc0379e3da69bf3fc3814793
-
SHA1
89e6c1c1483d111661b8f9aa97ad641bc1ed685e
-
SHA256
3946313fea511e28f2b831a31925bdc1a9d27c9e2cba53c5c6faceb03b824d36
-
SHA512
33d98bfb0642bf3fb639d587b54aecec4c0a8267c03f698fb6d7d906b8326f5cca8d3c6c01832d900fc99b22144b6bf58a32c263880d3290680c044cbeb63792
-
SSDEEP
393216:DqPnLFXlrPAQ8DOETgs5fGFbKgQDgrxvE4AD87ym:GPLFXNPAQhEphRM
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
-
-
Target
main.pyc
-
Size
7KB
-
MD5
15fae625d47efe6b691acd6a50987c3a
-
SHA1
341f19162d6da69c1f1954468c7457ef48262641
-
SHA256
1a414050e6bf2796faa629ac68cf656862be8f1cb5131ca01ea249b05dac230e
-
SHA512
26f9297fe2c12b6cd7e7324bd4ffc5d055e4289aad34ef6929f9a9b531bb2448da30d41d71d03941197af248b590b7825393e6ec897b2e5478f322adf4463849
-
SSDEEP
192:w3CZ3LPGUD8kL+WdXwfQaR5t7mJhwaK6MdwCeqnw:H7GeCWufNHK2X6P5qw
Score3/10 -