General
-
Target
Private server 4.8 (Emilia).exe
-
Size
17.7MB
-
Sample
240817-h99hesxdjl
-
MD5
72c00f23fb5421eb8bb7a1843597675d
-
SHA1
8ccea1f496be5cec0c0da4e1c5d7a2bf01f38f86
-
SHA256
ba834fb6411121af7cc759a200f0cdf8c4be4b53d710bc7a285939e9210c7d27
-
SHA512
d01162b5f018e05ef1c7772be7644f2ce46b9448a52004e8c9afcbf10029a13b1177167cabc868b05b17ca674bc9e90430d91b217de72ec259c7c14a1dd3d41f
-
SSDEEP
393216:WqPnLFXlrWQ8DOETgsvfG9g5RXvEcTujKqNRq:7PLFXNWQhECqyvuR
Behavioral task
behavioral1
Sample
Private server 4.8 (Emilia).exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
main.pyc
Resource
win10-20240404-en
Malware Config
Targets
-
-
Target
Private server 4.8 (Emilia).exe
-
Size
17.7MB
-
MD5
72c00f23fb5421eb8bb7a1843597675d
-
SHA1
8ccea1f496be5cec0c0da4e1c5d7a2bf01f38f86
-
SHA256
ba834fb6411121af7cc759a200f0cdf8c4be4b53d710bc7a285939e9210c7d27
-
SHA512
d01162b5f018e05ef1c7772be7644f2ce46b9448a52004e8c9afcbf10029a13b1177167cabc868b05b17ca674bc9e90430d91b217de72ec259c7c14a1dd3d41f
-
SSDEEP
393216:WqPnLFXlrWQ8DOETgsvfG9g5RXvEcTujKqNRq:7PLFXNWQhECqyvuR
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
-
-
Target
main.pyc
-
Size
7KB
-
MD5
257d73c98b9a85af45606074b228a398
-
SHA1
5aee715305de8f3ca50180b5461879c148b0cf52
-
SHA256
5c968da7a3cbefcec84c5ff24f9baca5dbac8e814fb27ddbbdef6605304765b4
-
SHA512
3a8e363c1ef4c9b5e5f7b1b6eece46dccee90bbca3e1f197b070a8eef829ee376403da8aaf9da6f9e5dcb9a12f423a561ed6a7f02e28988d35ab4b75aa2e43cb
-
SSDEEP
192:wEahb81DD80kWdXwRY61qHhQBFJhwx5xMdwVnw:ibO6WuRHEBQBv2x5xPVw
Score3/10 -