General
-
Target
ExInject V4.exe
-
Size
40.4MB
-
Sample
240423-tyxv2ahh55
-
MD5
b5376b0ac908c1ff23f00ba4b4823f87
-
SHA1
89f270e1404a76594b0780d70a7ab9491b1e0de3
-
SHA256
6957aa3b521d1ddcc4a512e2fe7aa93eabf58e9a53a4acd4866c4930a881de28
-
SHA512
49c1704611beec9469cb47c74fa285404afe33b442a2aa64dd0a4efdb5bc2cf523096d1fca9044f81d7e9ea8488f7ee8b9f3b7d015aee1bec4167bf69d555d40
-
SSDEEP
393216:zWvz+q3V1VUIC3L+9qz8GvD7fEU2IGY/Vt1Wom6:Sz+q37/O+9q4GL7fEvILpm6
Behavioral task
behavioral1
Sample
ExInject V4.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
exxexexex.pyc
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
ExInject V4.exe
-
Size
40.4MB
-
MD5
b5376b0ac908c1ff23f00ba4b4823f87
-
SHA1
89f270e1404a76594b0780d70a7ab9491b1e0de3
-
SHA256
6957aa3b521d1ddcc4a512e2fe7aa93eabf58e9a53a4acd4866c4930a881de28
-
SHA512
49c1704611beec9469cb47c74fa285404afe33b442a2aa64dd0a4efdb5bc2cf523096d1fca9044f81d7e9ea8488f7ee8b9f3b7d015aee1bec4167bf69d555d40
-
SSDEEP
393216:zWvz+q3V1VUIC3L+9qz8GvD7fEU2IGY/Vt1Wom6:Sz+q37/O+9q4GL7fEvILpm6
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
-
-
Target
exxexexex.pyc
-
Size
44KB
-
MD5
f3a787e7c2da671889a3219d587f3d05
-
SHA1
579e2b76e0aaf6d7327274d5e12a70f975a37746
-
SHA256
8eeb5933c9991210782c8d04ab5fb55a41544caf2234a3c96202a61c78bdc02a
-
SHA512
b005e4c4dd8d9be73b2efaac990a45c2a868046c131ac7bd801053a319b22bc634e5d1b7cc3a9f73ef0d18c65335a2a35db0a57839017ab54f14a0a315d947b1
-
SSDEEP
768:n9JWavmeVQ+gzp6LxOKH90Zf06pAFbo6LhrpJIkzRA1Sksd+Bgr48WPedDlhLx3V:n9JW4Xu4ObZf0mAhIkzRUSksd+SU8C8n
Score3/10 -