78f51dba7ddac2423a04b90cded3b30d1bab45b000319195553f4a3ef567969b | Triage

Sharing

General

Target

78f51dba7ddac2423a04b90cded3b30d1bab45b000319195553f4a3ef567969bN
Size

8.0MB
Sample

241005-xwylbsvcmb
MD5

9ef0de932ce3d3d7697726e5cefc4000
SHA1

6f6f2f715fd960f18888a4992d2e5b1a6515b306
SHA256

78f51dba7ddac2423a04b90cded3b30d1bab45b000319195553f4a3ef567969b
SHA512

40246fc10bca1c46485ca96ea71808cd3cf1499e7a7b1157e930039826d4f7f07e7ace64ddcb1cbc5d071d255bd8be5c534b4e0838a5f01efc9351531d0c907c
SSDEEP

196608:19ga6NXA/WXV4vkCpkubvhkSIuqLNDQCtOc25mUCLm0tB3meTJVTUN:19ga6NXA/WXVmThkSkLp/N25x0tBhG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  78f51dba7ddac2423a04b90cded3b30d1bab45b000319195553f4a3ef567969bN
- Size
  
  8.0MB
- MD5
  
  9ef0de932ce3d3d7697726e5cefc4000
- SHA1
  
  6f6f2f715fd960f18888a4992d2e5b1a6515b306
- SHA256
  
  78f51dba7ddac2423a04b90cded3b30d1bab45b000319195553f4a3ef567969b
- SHA512
  
  40246fc10bca1c46485ca96ea71808cd3cf1499e7a7b1157e930039826d4f7f07e7ace64ddcb1cbc5d071d255bd8be5c534b4e0838a5f01efc9351531d0c907c
- SSDEEP
  
  196608:19ga6NXA/WXV4vkCpkubvhkSIuqLNDQCtOc25mUCLm0tB3meTJVTUN:19ga6NXA/WXVmThkSkLp/N25x0tBhG
Score

7^/10

discovery
- Loads dropped DLL
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2