e7cae85cbc2cad1f80d2335db61d167bd478c4e69ba2343c725d516edcb579fb | Triage

Sharing

General

Target

e7cae85cbc2cad1f80d2335db61d167bd478c4e69ba2343c725d516edcb579fb
Size

87KB
Sample

240810-ejzzhsyfka
MD5

5c07cc4269969eb46cc292a9cccaa5e7
SHA1

6f162fe9e7641a9678c031a94645abe3b78981d2
SHA256

e7cae85cbc2cad1f80d2335db61d167bd478c4e69ba2343c725d516edcb579fb
SHA512

cbbaf1e1d586f262967ccfafbc14458300a9f43e30fce94cfe94236c81e1c3cea2655d90c989816da9a95f118e6c4b0d9dd327e4afb3d39c791a3a3cda2f71c8
SSDEEP

1536:GdWvtNFN+F+EchVsM/Vycyq1h6MtVYTjipvF2wI/KR11JdNqNY4X9/:IW1NWcyq1hnbYvQd26xU//

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e7cae85cbc2cad1f80d2335db61d167bd478c4e69ba2343c725d516edcb579fb
- Size
  
  87KB
- MD5
  
  5c07cc4269969eb46cc292a9cccaa5e7
- SHA1
  
  6f162fe9e7641a9678c031a94645abe3b78981d2
- SHA256
  
  e7cae85cbc2cad1f80d2335db61d167bd478c4e69ba2343c725d516edcb579fb
- SHA512
  
  cbbaf1e1d586f262967ccfafbc14458300a9f43e30fce94cfe94236c81e1c3cea2655d90c989816da9a95f118e6c4b0d9dd327e4afb3d39c791a3a3cda2f71c8
- SSDEEP
  
  1536:GdWvtNFN+F+EchVsM/Vycyq1h6MtVYTjipvF2wI/KR11JdNqNY4X9/:IW1NWcyq1hnbYvQd26xU//
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2