General
-
Target
Winver.exe.bin
-
Size
5.4MB
-
Sample
240409-c69fcsca86
-
MD5
4f8bd643c59658e3d5b04d760073cbe9
-
SHA1
7c322f68f67e239016a130952e33cda4723143a7
-
SHA256
8f4cf379ee2bef6b60fec792d36895dce3929bf26d0533fbb1fdb41988df7301
-
SHA512
9786627a64216e993f68c3439dc57cd37d3f307ab7f0fb6b2c157cef12562a4192b092513a99a36d3bba804c029db2af6bab48a27cd20950dc1f5d383ef511af
-
SSDEEP
49152:KyuFnchWhp4xJIjKQVAmWsZMbwDbQ87Owguj55EsLKX38CnSVTqiyrW3Y0X:189EJEzAbw/BeIEvzSNqdIX
Behavioral task
behavioral1
Sample
Winver.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Winver.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
apollo
https://daily-mashriq.org/goyxdrkhjilchyigflztv
Targets
-
-
Target
Winver.exe.bin
-
Size
5.4MB
-
MD5
4f8bd643c59658e3d5b04d760073cbe9
-
SHA1
7c322f68f67e239016a130952e33cda4723143a7
-
SHA256
8f4cf379ee2bef6b60fec792d36895dce3929bf26d0533fbb1fdb41988df7301
-
SHA512
9786627a64216e993f68c3439dc57cd37d3f307ab7f0fb6b2c157cef12562a4192b092513a99a36d3bba804c029db2af6bab48a27cd20950dc1f5d383ef511af
-
SSDEEP
49152:KyuFnchWhp4xJIjKQVAmWsZMbwDbQ87Owguj55EsLKX38CnSVTqiyrW3Y0X:189EJEzAbw/BeIEvzSNqdIX
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-