General

  • Target

    LeagueFVM_2.0.zip

  • Size

    21.9MB

  • Sample

    240627-zmt8nazfje

  • MD5

    b86e1e6d21c219eced34664f84de7d03

  • SHA1

    6146871f6cf3123367a764860684b3174bf2aff5

  • SHA256

    043de6b53869785aa6266f603c1c66990c264a6236d7826f6353aa730d24b53b

  • SHA512

    6baeaac11732369043b340a427fa05ee1105bc796ca3987384ba77be1eafbffc158f91e754b10d7c2fcc323458ff6d779935364008779ffa1df6fcaf9e2e1192

  • SSDEEP

    393216:OeQu7sHYPKYXCapmuLrH+UJ7JrRWLwVFc2m47FXvgwDIOWKB8MM:yisGCag2rH+UJNcL4cH458OZ8z

Score
7/10

Malware Config

Targets

    • Target

      LeagueFVM_2.0.exe

    • Size

      22.2MB

    • MD5

      c7099fd9009c4605055cfdd8f69b3d67

    • SHA1

      fecd785ce758f2df1e8b1f131aab1209e3ddab88

    • SHA256

      97b493562c20807549b0438b121bbb83ecf505fbc58eeb54e0b8845a07101ee7

    • SHA512

      d6d1bd586a18924a84c016d1e5843acebed623de44b5cd6000a6c6975ccef00f9cb8d70dceeadde87c96b1110e5eedcec79ccab53249d82230f9da9ba4ed4ba5

    • SSDEEP

      393216:3EkQLQtss27vCJWQsUcR4NzQW+eGQRg93iObIhRS/PcLprpJnU6oHd85Tv/:3YQts5CYQFIW+e5R49MhR+cV9lEy5T

    Score
    7/10
    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target

      LeagueF.pyc

    • Size

      109KB

    • MD5

      09658f82a7f22a059a342745fbe71328

    • SHA1

      fa51ca72313d5507549b88f84ab3197cb8ef5b06

    • SHA256

      8ad9bb41fa4ca10c873c10fa9ddee81f637d4ce97b053c79cc33f3c64832f683

    • SHA512

      709df92d2dded8969d24d9242a955d6dbced175bacb077540dc589239a75195b75c2af711f50225789becf7453569e81cb025663651ce0e1c7017432d2ad38cf

    • SSDEEP

      1536:APPK/7GKVKu+vKNZcYj9EoKmUIExzvEvB/4iHx5ShNc7W1D0fTawQvJPcSqi:gPyL+KNZcYjZcEvB3vjBOh1qi

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks