General

  • Target

    ASYNCCOPY.rbxm.exe

  • Size

    15.6MB

  • Sample

    240306-txd2jadc5x

  • MD5

    9b1c91dd477e2c6c301b22f533b009e2

  • SHA1

    5120994c7fc731d900bead2cc940483b5906c31f

  • SHA256

    c2ca0b70f11163ad1853569a945165f6e1123b1943817715c375e91042b2a064

  • SHA512

    f361d07a1816a23544c900f3944c7fa13a0c050947dfdb3877cd385a66e04e563d614764e58c82d34248ebf3a7eb6ce2972b9b0786d981ae596de35ce979f866

  • SSDEEP

    393216:9o9Ddnnx89uxfBh2Jp5M/urEUWjPCEhM1toymWX8Wjs+da:i9ZnxGuvhNdbqh1eymJes+da

Score
7/10

Malware Config

Targets

    • Target

      ASYNCCOPY.rbxm.exe

    • Size

      15.6MB

    • MD5

      9b1c91dd477e2c6c301b22f533b009e2

    • SHA1

      5120994c7fc731d900bead2cc940483b5906c31f

    • SHA256

      c2ca0b70f11163ad1853569a945165f6e1123b1943817715c375e91042b2a064

    • SHA512

      f361d07a1816a23544c900f3944c7fa13a0c050947dfdb3877cd385a66e04e563d614764e58c82d34248ebf3a7eb6ce2972b9b0786d981ae596de35ce979f866

    • SSDEEP

      393216:9o9Ddnnx89uxfBh2Jp5M/urEUWjPCEhM1toymWX8Wjs+da:i9ZnxGuvhNdbqh1eymJes+da

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks