5efc0ccfd63995950342dd908655951f56fb5a29f9cf2d7b6d1d90b58688f9b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7ff71f2a15a8c5b889a55c909694b20N.exe
Size

35KB
Sample

240802-yh4e4axelr
MD5

c7ff71f2a15a8c5b889a55c909694b20
SHA1

cceb3fb1930aa5425abc1f36e0ef02575bc9ad3f
SHA256

5efc0ccfd63995950342dd908655951f56fb5a29f9cf2d7b6d1d90b58688f9b1
SHA512

e93f33020d0b029ba319e38b8cdcab4dc6f4096e8358140768288d8939c7fb2e1a3623ea0d6e169d5ee73c2a806988136a604abf1052d2208bc80b177fe8984b
SSDEEP

768:1aK6RMHQF0Ta640zl2d6EIHkKRBHC+8ySbBKmsOsh4wm:1wKHQaTaT028EIHkQBHC+8ySbBKmsdSt

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c7ff71f2a15a8c5b889a55c909694b20N.exe
- Size
  
  35KB
- MD5
  
  c7ff71f2a15a8c5b889a55c909694b20
- SHA1
  
  cceb3fb1930aa5425abc1f36e0ef02575bc9ad3f
- SHA256
  
  5efc0ccfd63995950342dd908655951f56fb5a29f9cf2d7b6d1d90b58688f9b1
- SHA512
  
  e93f33020d0b029ba319e38b8cdcab4dc6f4096e8358140768288d8939c7fb2e1a3623ea0d6e169d5ee73c2a806988136a604abf1052d2208bc80b177fe8984b
- SSDEEP
  
  768:1aK6RMHQF0Ta640zl2d6EIHkKRBHC+8ySbBKmsOsh4wm:1wKHQaTaT028EIHkQBHC+8ySbBKmsdSt
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2