General
- Target acf1dcddc30b4aed73f9216539bb1974f7e9b8c25857184afc74764da1b64cc7.dll
- Size 446KB
- Sample240503-vg2ckabd8s
- SHA256 acf1dcddc30b4aed73f9216539bb1974f7e9b8c25857184afc74764da1b64cc7
- MD5 ea5a4c15ba2b29c65462cb24e0025644
- SHA1 22c9dd7a1f679a1fa24518da4c36f908071e2597
- SHA512 35d4ab13a3026ca3d435eddf6089229180fbba3bcb5c619b2a7dda82a411573acea23488910e3e648dae9a99f7966094600ef69fa7ba19b4a680deb31c1de4e6
- SSDEEP 12288:dtcLP7XVZpyrO+2ufEFoOrm0u9F+dAHQ8KsRh:dtcD7rpyrO+Beta+dAwbG
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
acf1dcddc30b4aed73f9216539bb1974f7e9b8c25857184afc74764da1b64cc7.dll
Resource
win10-20240404-en
3 signatures
600 seconds
Behavioral task
behavioral2
Sample
acf1dcddc30b4aed73f9216539bb1974f7e9b8c25857184afc74764da1b64cc7.dll
Resource
win10v2004-20240226-en
3 signatures
600 seconds
Behavioral task
behavioral3
Sample
acf1dcddc30b4aed73f9216539bb1974f7e9b8c25857184afc74764da1b64cc7.dll
Resource
win11-20240419-en
3 signatures
600 seconds
Malware Config
Targets
-
- Target acf1dcddc30b4aed73f9216539bb1974f7e9b8c25857184afc74764da1b64cc7.dll
- Size 446KB
- SHA256 acf1dcddc30b4aed73f9216539bb1974f7e9b8c25857184afc74764da1b64cc7
- MD5 ea5a4c15ba2b29c65462cb24e0025644
- SHA1 22c9dd7a1f679a1fa24518da4c36f908071e2597
- SHA512 35d4ab13a3026ca3d435eddf6089229180fbba3bcb5c619b2a7dda82a411573acea23488910e3e648dae9a99f7966094600ef69fa7ba19b4a680deb31c1de4e6
- SSDEEP 12288:dtcLP7XVZpyrO+2ufEFoOrm0u9F+dAHQ8KsRh:dtcD7rpyrO+Beta+dAwbG
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Blocklisted process makes network request
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.