General

  • Target

    e45e8089d322ae91662bfa63940e82db2c5eb542ffc6862333d712309305a843

  • Size

    52KB

  • Sample

    240308-bj8d4sbb77

  • MD5

    d3b1b70fad55f362c3ee15d919795331

  • SHA1

    0804914b2eb1dca23c2b8d29b2250f693ee249e9

  • SHA256

    e45e8089d322ae91662bfa63940e82db2c5eb542ffc6862333d712309305a843

  • SHA512

    8da4ebfecc4ab367de86d6c1be1464663c671aa7f95d16a3e68d06fc064f100242e9ddc7f8e6927ed58ee3ffe42ef1526f01870cfa61c64bcbd70b512e861117

  • SSDEEP

    1536:hikeKhs7PNZvInXqdWbh8UH9SZ47Qn/uHoZ:fxhyfARH9SZ4uuIZ

Score
10/10

Malware Config

Targets

    • Target

      e45e8089d322ae91662bfa63940e82db2c5eb542ffc6862333d712309305a843

    • Size

      52KB

    • MD5

      d3b1b70fad55f362c3ee15d919795331

    • SHA1

      0804914b2eb1dca23c2b8d29b2250f693ee249e9

    • SHA256

      e45e8089d322ae91662bfa63940e82db2c5eb542ffc6862333d712309305a843

    • SHA512

      8da4ebfecc4ab367de86d6c1be1464663c671aa7f95d16a3e68d06fc064f100242e9ddc7f8e6927ed58ee3ffe42ef1526f01870cfa61c64bcbd70b512e861117

    • SSDEEP

      1536:hikeKhs7PNZvInXqdWbh8UH9SZ47Qn/uHoZ:fxhyfARH9SZ4uuIZ

    Score
    9/10
    • Detects executables built or packed with MPress PE compressor

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks