Resubmissions

27/03/2024, 17:56

240327-wjahascg4t 7

27/03/2024, 17:31

240327-v36jeahb34 7

General

  • Target

    yesrape.exe

  • Size

    69.5MB

  • Sample

    240327-v36jeahb34

  • MD5

    bcee511c467aec328e67927eab022152

  • SHA1

    52cd109ffe0c8c0626e7eddc9eace019e87d1a18

  • SHA256

    c07eec0bbd69bea4dfecb4aed8f757a008930a8c983b29543126cbc01b086798

  • SHA512

    4b41b86c1916f947ef701b7a5c52136d62043dd762b52f9623ad5eed3268bc7954c7f081e3c07c1d01a52117df17ad7482df2b3ef4b7bd0ff6b7557796c24c43

  • SSDEEP

    1572864:YYQtvxXFP/V4f6Gj53ikjt4jRq2GqFOPV58W+eHU2qHWB75izWm/mlWA29SJ9gQ:pYt/VG6RmtCRlGPrXk2qHO5iqzv2AJ9g

Score
7/10

Malware Config

Targets

    • Target

      yesrape.exe

    • Size

      69.5MB

    • MD5

      bcee511c467aec328e67927eab022152

    • SHA1

      52cd109ffe0c8c0626e7eddc9eace019e87d1a18

    • SHA256

      c07eec0bbd69bea4dfecb4aed8f757a008930a8c983b29543126cbc01b086798

    • SHA512

      4b41b86c1916f947ef701b7a5c52136d62043dd762b52f9623ad5eed3268bc7954c7f081e3c07c1d01a52117df17ad7482df2b3ef4b7bd0ff6b7557796c24c43

    • SSDEEP

      1572864:YYQtvxXFP/V4f6Gj53ikjt4jRq2GqFOPV58W+eHU2qHWB75izWm/mlWA29SJ9gQ:pYt/VG6RmtCRlGPrXk2qHO5iqzv2AJ9g

    Score
    7/10
    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks