97af7cce901a745d04bf59c2f933f3686328acf1a628ee1b50835adc1025a12e | Triage

Sharing

General

Target

a5d17c1d59f0612c016dfa1fcbb3e040N.exe
Size

67KB
Sample

240817-q5w1ja1hmk
MD5

a5d17c1d59f0612c016dfa1fcbb3e040
SHA1

2357c7a8393f1c3e7d676d416eb745cd6310f8d0
SHA256

97af7cce901a745d04bf59c2f933f3686328acf1a628ee1b50835adc1025a12e
SHA512

d62bc20d0547aa3730c86803bf1fb277799b79dfcc23383cb55f24273867cafafb1bed702465c7674e10ff02a14d444a124cc4c47b076657dd0251f8c2b35ff6
SSDEEP

1536:jqBcjcygYu1nPyh0+mVVxlX9qNlmDWhX4eUH9AwX:jqBG0+4xlX9qNlmWhjUGwX

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a5d17c1d59f0612c016dfa1fcbb3e040N.exe
- Size
  
  67KB
- MD5
  
  a5d17c1d59f0612c016dfa1fcbb3e040
- SHA1
  
  2357c7a8393f1c3e7d676d416eb745cd6310f8d0
- SHA256
  
  97af7cce901a745d04bf59c2f933f3686328acf1a628ee1b50835adc1025a12e
- SHA512
  
  d62bc20d0547aa3730c86803bf1fb277799b79dfcc23383cb55f24273867cafafb1bed702465c7674e10ff02a14d444a124cc4c47b076657dd0251f8c2b35ff6
- SSDEEP
  
  1536:jqBcjcygYu1nPyh0+mVVxlX9qNlmDWhX4eUH9AwX:jqBG0+4xlX9qNlmWhjUGwX
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2