Overview

overview

6

Static

static

1

background...ugs.py

windows7-x64

6

background...ugs.py

windows10-2004-x64

3

main.py

windows7-x64

3

main.py

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Virus-Total.zip

  • Size

    1.0MB

  • Sample

    240908-p3hjpayhqf

  • MD5

    13eaa66fb12f022f89a614c53a4d2fdc

  • SHA1

    3153a9ffa5e3251fc1667e13d64a560d14c6b8b0

  • SHA256

    559b1af87644295433e0d923cfe83bd3f5cc34bbb42e0ba5582cb6f7783fba5d

  • SHA512

    32b351a2d76347be5f6ab6152d5a5513027b87854626098c401d247833561d67feb7afccbf2184e71f26bb40aed160d1cfead028d1a5aa8450a4866e4122f6c1

  • SSDEEP

    24576:aaOIngVGuIphKkElB+Gd3N5y58/AJ4KhO5Lbhj7yEDLGb5FO:a1Ia3Ip8RjW8/AaK6Lbhj7yEOFO

Score
6/10
discovery

Malware Config

Targets

    • Target

      background/search-bugs.py

    • Size

      344KB

    • MD5

      1044b80ce7e0e5ae8eebf08b8241c6ad

    • SHA1

      3df2980cefe3c35408dca0218d6541452560b316

    • SHA256

      4ab523e11a95a127b751f20ea1727369d1b4b6a0d0a19ee28d75ce348fd984c3

    • SHA512

      647ff55437638abe8989954b06716bb7cac3759dc22f1d8e6004c2687839a58bb8d245c14084b4ab93ec3cce53266ab53cb7c135fa33d7e957cff6a28cafcb85

    • SSDEEP

      6144:bcHWtyz37Ds2UJwNn+fkaRvpCjHmrtgScLfJQa28u07srTkQYUw:Rtk7qwnaRvE6aLCa28OTkQYUw

    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

    • Target

      main.py

    • Size

      1KB

    • MD5

      0c8d8d36de7475550788e319669b282c

    • SHA1

      65c58a2e663c085eb6ee11baf101622184fe4c16

    • SHA256

      e6ff211f4bdabf59b25d522158adc2c85ed2611045fe9db41a437ae3c755280e

    • SHA512

      4241c07c8fc1303ceff08ef0a374cafc14960ce51755d2e54d21dfcde22dfdde021e90f6b772a21898849aea93b049ea49722ae483231a91c73445ac60c4d4a8

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks