General

  • Target

    Unconfirmed 237962.crdownload

  • Size

    17.7MB

  • Sample

    240310-2xpf9sdd86

  • MD5

    ca7b698d03aed035aadf4704d19ce1d7

  • SHA1

    6854ea3637f14db3c4d73406e3f18f89ae42f445

  • SHA256

    5fca8e1e90cc8f5bf7ccfd8440ad22021784956fd6f7e6f2abf3053ee0753b5f

  • SHA512

    aaa63ca934d1fce4f119296e57583d1e80cb987675706dad164725fd84bdfd93d4815c8eabbcb9245251d5637ea975f2cf8d5971a367413087a620305bc9ca71

  • SSDEEP

    393216:VqPnLFXlrSQ8DOETgsvfGbgYzvEVZGevEIq:MPLFXNSQhEk7YqeY

Malware Config

Targets

    • Target

      Unconfirmed 237962.crdownload

    • Size

      17.7MB

    • MD5

      ca7b698d03aed035aadf4704d19ce1d7

    • SHA1

      6854ea3637f14db3c4d73406e3f18f89ae42f445

    • SHA256

      5fca8e1e90cc8f5bf7ccfd8440ad22021784956fd6f7e6f2abf3053ee0753b5f

    • SHA512

      aaa63ca934d1fce4f119296e57583d1e80cb987675706dad164725fd84bdfd93d4815c8eabbcb9245251d5637ea975f2cf8d5971a367413087a620305bc9ca71

    • SSDEEP

      393216:VqPnLFXlrSQ8DOETgsvfGbgYzvEVZGevEIq:MPLFXNSQhEk7YqeY

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks