General
- Target 731812403191b60503e017d88e23b1a3.bin
- Size 4.1MB
- Sample240301-s46jpahe82
- SHA256 11e21fbd77f65c83f97c0c2b38c8cd394d5c96fe780188e5c94d400346b49798
Score
10/10
Malware Config
Targets
-
- Target db874ae685d2bc4235b1213ec9d43d327c8d2bd12300bb0d78c9ce0a84c828b2.exe
- Size 5.6MB
- SHA256 db874ae685d2bc4235b1213ec9d43d327c8d2bd12300bb0d78c9ce0a84c828b2
Score10/10MilleniumRat
MilleniumRat is a remote access trojan written in C#.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Legitimate hosting services abused for malware hosting/C2
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.