Resubmissions

21-10-2024 04:58

241021-fl47pa1flm 10

15-08-2024 23:50

240815-3v1xyssfnb 10

General

  • Target

    main (1).exe

  • Size

    18.5MB

  • Sample

    241021-fl47pa1flm

  • MD5

    e1fd2c6e9d7bc6ccfd7d7b0329454153

  • SHA1

    a6c4baae90ebf09aedf6073254c40ea1d616e2c8

  • SHA256

    edb6932ffbc895cb9e9404108e99ba6436c87f76d8e488901a8c41fb83af8cd6

  • SHA512

    613ba1228c993c632bf824f03f00f0427c0eb0833ff5058c544433f3c060d11f564d62a8354c5391c5037a1256d81da9107670d060c82ac652f4e11200e0ebe5

  • SSDEEP

    393216:gqPnLFXlrPrQ8DOETgs77fGFrghSuIkZvEPyPYWFV0YEq:hPLFXNjQhE76QgqgiVz

Malware Config

Targets

    • Target

      main (1).exe

    • Size

      18.5MB

    • MD5

      e1fd2c6e9d7bc6ccfd7d7b0329454153

    • SHA1

      a6c4baae90ebf09aedf6073254c40ea1d616e2c8

    • SHA256

      edb6932ffbc895cb9e9404108e99ba6436c87f76d8e488901a8c41fb83af8cd6

    • SHA512

      613ba1228c993c632bf824f03f00f0427c0eb0833ff5058c544433f3c060d11f564d62a8354c5391c5037a1256d81da9107670d060c82ac652f4e11200e0ebe5

    • SSDEEP

      393216:gqPnLFXlrPrQ8DOETgs77fGFrghSuIkZvEPyPYWFV0YEq:hPLFXNjQhE76QgqgiVz

    Score
    7/10
    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks