Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
11/07/2024, 19:17
Static task
static1
Behavioral task
behavioral1
Sample
02ff55100153da68db34257a1ddd3150N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
02ff55100153da68db34257a1ddd3150N.exe
Resource
win10v2004-20240709-en
General
-
Target
02ff55100153da68db34257a1ddd3150N.exe
-
Size
419KB
-
MD5
02ff55100153da68db34257a1ddd3150
-
SHA1
8fcdf37a9e38399d978a9050888615263a21f0cb
-
SHA256
a4790638dffc655280faaaf27ad6372164087587a5960ea9860acc2fc2399ea7
-
SHA512
b142d5e63ceda4903882123d84b0e886c9be9757cd022c4e76652f1344a20950f98734fc7d6a651bc2abd9abc83ef890a648c4d63d462a078a5202946d465baf
-
SSDEEP
6144:PobjEXSzaltvWwezOstpX93E7dmEQjpdGHDRbQ8kiNQPQkub2tiet:PobjEXj7l2+/QTAYHaDet
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 4 api.ipinfodb.com -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2284 02ff55100153da68db34257a1ddd3150N.exe 2284 02ff55100153da68db34257a1ddd3150N.exe