67ae2cc4195583957c8c96b2aa01c66e76ce557b448d7a9ea63f6d21f7490ebf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

768158861bf0b0133e6505f32db82af0N
Size

35KB
Sample

240913-mn5dssyakk
MD5

768158861bf0b0133e6505f32db82af0
SHA1

6986f1a74074b72cfde03d115f5e33a16f796cd1
SHA256

67ae2cc4195583957c8c96b2aa01c66e76ce557b448d7a9ea63f6d21f7490ebf
SHA512

22ed61c4ff3ae6c0a121e99dc6761a32bee04363d07d5f74b30b0dfffca63b51dc07adb41d52a4cc4306700a72aa68b54416e8ba0a69181ce5244eb28cc7de17
SSDEEP

768:6eeI2//kFi7tCV6rtfZYjBUfyL4Mk9WBNvnFRtDM:622nkFi7thRfZYtUfyL4Mk9WBNXto

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  768158861bf0b0133e6505f32db82af0N
- Size
  
  35KB
- MD5
  
  768158861bf0b0133e6505f32db82af0
- SHA1
  
  6986f1a74074b72cfde03d115f5e33a16f796cd1
- SHA256
  
  67ae2cc4195583957c8c96b2aa01c66e76ce557b448d7a9ea63f6d21f7490ebf
- SHA512
  
  22ed61c4ff3ae6c0a121e99dc6761a32bee04363d07d5f74b30b0dfffca63b51dc07adb41d52a4cc4306700a72aa68b54416e8ba0a69181ce5244eb28cc7de17
- SSDEEP
  
  768:6eeI2//kFi7tCV6rtfZYjBUfyL4Mk9WBNvnFRtDM:622nkFi7thRfZYtUfyL4Mk9WBNXto
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2