General
-
Target
sigmahacks0.2.exe
-
Size
16.7MB
-
Sample
240430-3de9xsac91
-
MD5
dec028efade29b7af7d82843dee50f97
-
SHA1
c3fe1ef22003329c9d48a4be4c6c8adeb59f7003
-
SHA256
40a2289a95b1c4093abcd5bd56da54f12736aa14b1083d473f933cb8edab9d8d
-
SHA512
5151db4af95200cfaced73684f754da366ce7bc1cdda6f2ccf3fe915d49e4004328da2183aad4ef1e833009044fb2dc8e109c04559536c629bc13e97149e2f4d
-
SSDEEP
393216:ULQ8s4u1wW+eGQR79johBGcP6USpfOY5:MQ3R1wW+e5R79ME5OY5
Behavioral task
behavioral1
Sample
sigmahacks0.2.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
sigmahacks0.2.exe
Resource
win11-20240419-en
Behavioral task
behavioral3
Sample
kLXISTfbYJ.pyc
Resource
win10v2004-20240419-en
Behavioral task
behavioral4
Sample
kLXISTfbYJ.pyc
Resource
win11-20240426-en
Malware Config
Targets
-
-
Target
sigmahacks0.2.exe
-
Size
16.7MB
-
MD5
dec028efade29b7af7d82843dee50f97
-
SHA1
c3fe1ef22003329c9d48a4be4c6c8adeb59f7003
-
SHA256
40a2289a95b1c4093abcd5bd56da54f12736aa14b1083d473f933cb8edab9d8d
-
SHA512
5151db4af95200cfaced73684f754da366ce7bc1cdda6f2ccf3fe915d49e4004328da2183aad4ef1e833009044fb2dc8e109c04559536c629bc13e97149e2f4d
-
SSDEEP
393216:ULQ8s4u1wW+eGQR79johBGcP6USpfOY5:MQ3R1wW+e5R79ME5OY5
-
Drops startup file
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
-
-
Target
kLXISTfbYJ.pyc
-
Size
57KB
-
MD5
053dc7d5b3067b2cf9e8b1878fcfc39b
-
SHA1
966b034a17836a00a30bd41dde9595d4cf1e1c21
-
SHA256
c90bc249d799c97cdb37cdca0cd9e1d5fa4347bcd851d8027ff3b7dbfd112984
-
SHA512
87274fd921386b2e7e7dc47918ef66cdb0505c6351faf79a7f0557c285cb4f81a1a1a161903508c01633e76beb5094e39f2249bce1ab37059afda555b69409a3
-
SSDEEP
768:CCyWqks1l/mja1fgFK2K+La+2LcGVdPNQ1tFA0JK5EIHs:flqks1l/ma1f8K2K+La+218nIHs
Score3/10 -