General
- Target vault.exe
- Size 17.8MB
- Sample240619-m45phayfph
- SHA256 b116e2c650cc3ff343a9ab05fdfed45ceabce42a4c07b6555bef30670502b181
- MD5 57bdbb5087c48b95cc99d77d9199482c
- SHA1 48ec955f4c98a01d404cc2ec966ed309d5a2c5d1
- SHA512 ec8c1a159b6a0b259b7b32705dcf460a1448c3b359a35a3205cb145af254a37c7dfc963a05dced8d6e10f28c8d9b767275c77f0878fcb72416ce41eba898f4d1
- SSDEEP 393216:oqPnLFXlrPmQ8DOETgsvfGFNgSJmvEHClxFF5q:ZPLFXNOQhEORBSxE
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
vault.exe
Resource
win10-20240404-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
vault.exe
Resource
win10-20240404-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
vault.exe
Resource
win7-20240508-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
vault.exe
Resource
win10v2004-20240508-en
10 signatures
150 seconds
Behavioral task
behavioral5
Sample
vault.exe
Resource
win11-20240419-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target vault.exe
- Size 17.8MB
- SHA256 b116e2c650cc3ff343a9ab05fdfed45ceabce42a4c07b6555bef30670502b181
- MD5 57bdbb5087c48b95cc99d77d9199482c
- SHA1 48ec955f4c98a01d404cc2ec966ed309d5a2c5d1
- SHA512 ec8c1a159b6a0b259b7b32705dcf460a1448c3b359a35a3205cb145af254a37c7dfc963a05dced8d6e10f28c8d9b767275c77f0878fcb72416ce41eba898f4d1
- SSDEEP 393216:oqPnLFXlrPmQ8DOETgsvfGFNgSJmvEHClxFF5q:ZPLFXNOQhEORBSxE
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.