General

  • Target

    Spotify.exe

  • Size

    16.9MB

  • Sample

    240308-s56ababf4x

  • MD5

    f72d152f5e62a72cd9406a76eae2cc94

  • SHA1

    8b1cb6bb683d010dcef3dce07e248468b92cecf8

  • SHA256

    d8e989aa0fdef207f7d5dd6915f725edb40d423cae221c59aa0691dd8e86c351

  • SHA512

    ac48ff8bcd45bd35bc178a9c9d34f88fcb33925f04db98439188a7641d2246ac069b1f4af2762bdcc4b489ca5dc0913e616e9c9f7d64956e74d263d1fe831652

  • SSDEEP

    393216:f3iIE7Yoa+4uWntpUTLfhJsW+eGQRe9jo7BGzgG43/q66WCQ:fM7ra+R6HUTLJSW+e5Re9M4tVQ

Malware Config

Targets

    • Target

      Spotify.exe

    • Size

      16.9MB

    • MD5

      f72d152f5e62a72cd9406a76eae2cc94

    • SHA1

      8b1cb6bb683d010dcef3dce07e248468b92cecf8

    • SHA256

      d8e989aa0fdef207f7d5dd6915f725edb40d423cae221c59aa0691dd8e86c351

    • SHA512

      ac48ff8bcd45bd35bc178a9c9d34f88fcb33925f04db98439188a7641d2246ac069b1f4af2762bdcc4b489ca5dc0913e616e9c9f7d64956e74d263d1fe831652

    • SSDEEP

      393216:f3iIE7Yoa+4uWntpUTLfhJsW+eGQRe9jo7BGzgG43/q66WCQ:fM7ra+R6HUTLJSW+e5Re9M4tVQ

    Score
    7/10
    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks