94f8ad39a326a98f353fe3d4018c6991f2726b31e9984d94ad311fe9d8738f13 | Triage

Sharing

General

Target

94f8ad39a326a98f353fe3d4018c6991f2726b31e9984d94ad311fe9d8738f13N
Size

37KB
Sample

241010-aa131axcrr
MD5

1e409dbe5f2b2c0e5e319fd2c84c1f40
SHA1

ab82fa549642e61d49d56e8f8580b72e3592f538
SHA256

94f8ad39a326a98f353fe3d4018c6991f2726b31e9984d94ad311fe9d8738f13
SHA512

be11da106c423153f3498e2ea62154a9e7e9e280b0485dad6f1d64fb0bd58c5d830be3705012d9a94090a20ebcf39c4ba4f0c9f58c0c9e551344270eada1e80a
SSDEEP

768:0MkJHSeGnELJP4chOkKivgO2C5pn8YiXMt/skFjzrW:0MuHS/u1hOk5oG5pn8Yi8t/sL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  94f8ad39a326a98f353fe3d4018c6991f2726b31e9984d94ad311fe9d8738f13N
- Size
  
  37KB
- MD5
  
  1e409dbe5f2b2c0e5e319fd2c84c1f40
- SHA1
  
  ab82fa549642e61d49d56e8f8580b72e3592f538
- SHA256
  
  94f8ad39a326a98f353fe3d4018c6991f2726b31e9984d94ad311fe9d8738f13
- SHA512
  
  be11da106c423153f3498e2ea62154a9e7e9e280b0485dad6f1d64fb0bd58c5d830be3705012d9a94090a20ebcf39c4ba4f0c9f58c0c9e551344270eada1e80a
- SSDEEP
  
  768:0MkJHSeGnELJP4chOkKivgO2C5pn8YiXMt/skFjzrW:0MuHS/u1hOk5oG5pn8Yi8t/sL
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2