General

  • Target

    ExInject V4.exe

  • Size

    40.4MB

  • Sample

    240423-tyxv2ahh55

  • MD5

    b5376b0ac908c1ff23f00ba4b4823f87

  • SHA1

    89f270e1404a76594b0780d70a7ab9491b1e0de3

  • SHA256

    6957aa3b521d1ddcc4a512e2fe7aa93eabf58e9a53a4acd4866c4930a881de28

  • SHA512

    49c1704611beec9469cb47c74fa285404afe33b442a2aa64dd0a4efdb5bc2cf523096d1fca9044f81d7e9ea8488f7ee8b9f3b7d015aee1bec4167bf69d555d40

  • SSDEEP

    393216:zWvz+q3V1VUIC3L+9qz8GvD7fEU2IGY/Vt1Wom6:Sz+q37/O+9q4GL7fEvILpm6

Score
7/10

Malware Config

Targets

    • Target

      ExInject V4.exe

    • Size

      40.4MB

    • MD5

      b5376b0ac908c1ff23f00ba4b4823f87

    • SHA1

      89f270e1404a76594b0780d70a7ab9491b1e0de3

    • SHA256

      6957aa3b521d1ddcc4a512e2fe7aa93eabf58e9a53a4acd4866c4930a881de28

    • SHA512

      49c1704611beec9469cb47c74fa285404afe33b442a2aa64dd0a4efdb5bc2cf523096d1fca9044f81d7e9ea8488f7ee8b9f3b7d015aee1bec4167bf69d555d40

    • SSDEEP

      393216:zWvz+q3V1VUIC3L+9qz8GvD7fEU2IGY/Vt1Wom6:Sz+q37/O+9q4GL7fEvILpm6

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target

      exxexexex.pyc

    • Size

      44KB

    • MD5

      f3a787e7c2da671889a3219d587f3d05

    • SHA1

      579e2b76e0aaf6d7327274d5e12a70f975a37746

    • SHA256

      8eeb5933c9991210782c8d04ab5fb55a41544caf2234a3c96202a61c78bdc02a

    • SHA512

      b005e4c4dd8d9be73b2efaac990a45c2a868046c131ac7bd801053a319b22bc634e5d1b7cc3a9f73ef0d18c65335a2a35db0a57839017ab54f14a0a315d947b1

    • SSDEEP

      768:n9JWavmeVQ+gzp6LxOKH90Zf06pAFbo6LhrpJIkzRA1Sksd+Bgr48WPedDlhLx3V:n9JW4Xu4ObZf0mAhIkzRUSksd+SU8C8n

    Score
    3/10

MITRE ATT&CK Matrix ATT&CK v13

Tasks