e0d0604e19fed27e428d42ffe12a0b0f4dac4249c1de73fd5c867c078efc961c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0d0604e19fed27e428d42ffe12a0b0f4dac4249c1de73fd5c867c078efc961c
Size

53KB
Sample

240817-g2kcwsvblr
MD5

52dff1db7fd9792b5b31a3e00adc030f
SHA1

5999095bdc1d23fb6d73ca4e739e83fbb0e685a8
SHA256

e0d0604e19fed27e428d42ffe12a0b0f4dac4249c1de73fd5c867c078efc961c
SHA512

d9aa5074928c4bd8b366be05d0d5394e523325d83a8f117ec54df6ead18d5bf03adba0ca3b400d2f22b1ec07e1deebce3dc315bc1fcf33b177ece6568ac86bb9
SSDEEP

1536:TalEkKgJOyjc4oqULVJBoLmcYXV/O16nvaHWlJ:vbOHw5qLmcYXVlnvkO

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e0d0604e19fed27e428d42ffe12a0b0f4dac4249c1de73fd5c867c078efc961c
- Size
  
  53KB
- MD5
  
  52dff1db7fd9792b5b31a3e00adc030f
- SHA1
  
  5999095bdc1d23fb6d73ca4e739e83fbb0e685a8
- SHA256
  
  e0d0604e19fed27e428d42ffe12a0b0f4dac4249c1de73fd5c867c078efc961c
- SHA512
  
  d9aa5074928c4bd8b366be05d0d5394e523325d83a8f117ec54df6ead18d5bf03adba0ca3b400d2f22b1ec07e1deebce3dc315bc1fcf33b177ece6568ac86bb9
- SSDEEP
  
  1536:TalEkKgJOyjc4oqULVJBoLmcYXV/O16nvaHWlJ:vbOHw5qLmcYXVlnvkO
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2