General

  • Target

    SecuriteInfo.com.Trojan.Siggen22.10132.22352.5298.exe

  • Size

    1.8MB

  • Sample

    240316-ey8j7sdf54

  • MD5

    7087bddd9016174c0222a847a36eb9d8

  • SHA1

    991a3ea39160dc40a480fdc299d9286a000a2917

  • SHA256

    10fd6d375a30b6e01133a01dea74df5a7c729aef7677aa5ee5bbc36e2a7ba251

  • SHA512

    67a48274ef94d92e89cc04c68713ca168a9eefafb7a1a32a19c9e45b64af1cb60e699d78e9361e1851180324ce7cc99841c58a2ad7988eb87dfc08aa2036fe39

  • SSDEEP

    49152:Koe4NErAuWkNfg8jahiIPYPwd+YRHm1TN3PJS:KoqcLkNf96iAYW4S

Score
7/10
upx

Malware Config

Targets

    • Target

      SecuriteInfo.com.Trojan.Siggen22.10132.22352.5298.exe

    • Size

      1.8MB

    • MD5

      7087bddd9016174c0222a847a36eb9d8

    • SHA1

      991a3ea39160dc40a480fdc299d9286a000a2917

    • SHA256

      10fd6d375a30b6e01133a01dea74df5a7c729aef7677aa5ee5bbc36e2a7ba251

    • SHA512

      67a48274ef94d92e89cc04c68713ca168a9eefafb7a1a32a19c9e45b64af1cb60e699d78e9361e1851180324ce7cc99841c58a2ad7988eb87dfc08aa2036fe39

    • SSDEEP

      49152:Koe4NErAuWkNfg8jahiIPYPwd+YRHm1TN3PJS:KoqcLkNf96iAYW4S

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks