Overview

overview

10

Static

static

10

acf1dcddc3...c7.dll

windows10-1703-x64

8

acf1dcddc3...c7.dll

windows10-2004-x64

8

acf1dcddc3...c7.dll

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    acf1dcddc30b4aed73f9216539bb1974f7e9b8c25857184afc74764da1b64cc7.dll

  • Size

    446KB

  • Sample

    240503-vg2ckabd8s

  • MD5

    ea5a4c15ba2b29c65462cb24e0025644

  • SHA1

    22c9dd7a1f679a1fa24518da4c36f908071e2597

  • SHA256

    acf1dcddc30b4aed73f9216539bb1974f7e9b8c25857184afc74764da1b64cc7

  • SHA512

    35d4ab13a3026ca3d435eddf6089229180fbba3bcb5c619b2a7dda82a411573acea23488910e3e648dae9a99f7966094600ef69fa7ba19b4a680deb31c1de4e6

  • SSDEEP

    12288:dtcLP7XVZpyrO+2ufEFoOrm0u9F+dAHQ8KsRh:dtcD7rpyrO+Beta+dAwbG

Score
10/10
ssloadloader

Malware Config

Targets

    • Target

      acf1dcddc30b4aed73f9216539bb1974f7e9b8c25857184afc74764da1b64cc7.dll

    • Size

      446KB

    • MD5

      ea5a4c15ba2b29c65462cb24e0025644

    • SHA1

      22c9dd7a1f679a1fa24518da4c36f908071e2597

    • SHA256

      acf1dcddc30b4aed73f9216539bb1974f7e9b8c25857184afc74764da1b64cc7

    • SHA512

      35d4ab13a3026ca3d435eddf6089229180fbba3bcb5c619b2a7dda82a411573acea23488910e3e648dae9a99f7966094600ef69fa7ba19b4a680deb31c1de4e6

    • SSDEEP

      12288:dtcLP7XVZpyrO+2ufEFoOrm0u9F+dAHQ8KsRh:dtcD7rpyrO+Beta+dAwbG

    Score
    8/10

    • Blocklisted process makes network request

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks