General

  • Target

    vvz.exe

  • Size

    16.9MB

  • Sample

    240306-sgknpsbg5w

  • MD5

    aa34f76408288d90fa1df2e14c26228e

  • SHA1

    17f8babfd832e68f5dd02f648da34312d88f2f9a

  • SHA256

    aa021f20c9ed15ccd265b832b6e37f00c16c02ae2b4d2b8101ee6e9b2e1fa7ed

  • SHA512

    b31b6f1ec112bab672c4262c21be24806c4ca8089c262f6bc18b2d07bbcacffc1983f10f2babb0685034a32b6ae58b43b3317364d96db67979a15f3fae3e4803

  • SSDEEP

    393216:MiIE7Yoa+4uWntpUTLfhJsW+eGQRe9jo7BGzgG43/q66WCQ:F7ra+R6HUTLJSW+e5Re9M4tVQ

Malware Config

Targets

    • Target

      vvz.exe

    • Size

      16.9MB

    • MD5

      aa34f76408288d90fa1df2e14c26228e

    • SHA1

      17f8babfd832e68f5dd02f648da34312d88f2f9a

    • SHA256

      aa021f20c9ed15ccd265b832b6e37f00c16c02ae2b4d2b8101ee6e9b2e1fa7ed

    • SHA512

      b31b6f1ec112bab672c4262c21be24806c4ca8089c262f6bc18b2d07bbcacffc1983f10f2babb0685034a32b6ae58b43b3317364d96db67979a15f3fae3e4803

    • SSDEEP

      393216:MiIE7Yoa+4uWntpUTLfhJsW+eGQRe9jo7BGzgG43/q66WCQ:F7ra+R6HUTLJSW+e5Re9M4tVQ

    Score
    7/10
    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks