General
-
Target
fe18922a4548bb9230c0fafe2e88b36c325b0a7e1e79f9c50a640b04966f0a81.zip
-
Size
452KB
-
Sample
240524-lfbwvace93
-
MD5
893f9554ac1c3a8cbdf523ab6d756f56
-
SHA1
c6aac0acac9ead58672181bb0f6e45acccf99d72
-
SHA256
fe18922a4548bb9230c0fafe2e88b36c325b0a7e1e79f9c50a640b04966f0a81
-
SHA512
48b6e24cb060d701e5b743408508834ca1525ad75c74c7a0efca30aaee060ad8a6e0bca872bc845474ecf9c7d4e57f349520840c2318fd12c3e3b066e863f725
-
SSDEEP
12288:qUyrjR7xqzLH/MPcnEQ6Gro/s1z41MhPQawBrHWt:2jR7xWLfOg2Ko/s541MhPQa4Tm
Static task
static1
Behavioral task
behavioral1
Sample
fe18922a4548bb9230c0fafe2e88b36c325b0a7e1e79f9c50a640b04966f0a81.jar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe18922a4548bb9230c0fafe2e88b36c325b0a7e1e79f9c50a640b04966f0a81.jar
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
fe18922a4548bb9230c0fafe2e88b36c325b0a7e1e79f9c50a640b04966f0a81.zip
-
Size
452KB
-
MD5
893f9554ac1c3a8cbdf523ab6d756f56
-
SHA1
c6aac0acac9ead58672181bb0f6e45acccf99d72
-
SHA256
fe18922a4548bb9230c0fafe2e88b36c325b0a7e1e79f9c50a640b04966f0a81
-
SHA512
48b6e24cb060d701e5b743408508834ca1525ad75c74c7a0efca30aaee060ad8a6e0bca872bc845474ecf9c7d4e57f349520840c2318fd12c3e3b066e863f725
-
SSDEEP
12288:qUyrjR7xqzLH/MPcnEQ6Gro/s1z41MhPQawBrHWt:2jR7xWLfOg2Ko/s541MhPQa4Tm
Score7/10-
Drops startup file
-
Loads dropped DLL
-
Modifies file permissions
-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-