Overview

overview

7

Static

static

3

telethondev.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    telethondev.exe

  • Size

    30.9MB

  • Sample

    241227-zleftazmfj

  • MD5

    510bce5fa0f7c1de26a473f881c99ab8

  • SHA1

    202d54949ebda6218cd80ffb7fa9e871fc30aa7b

  • SHA256

    849ad321b52fb605bb0a7d1fed95c356f0694b5e93cc14acab5b96085a60cc5b

  • SHA512

    dd61f60f2fe036d1ab53a36f6edb779f5534ce52b5dddc1cf236ce6728263244da39075d702fee08da99922e6986ba7c983ff110064b01b169c26a12d1c4014c

  • SSDEEP

    786432:50yZ2YwUlJtb0gt3orMxITX1blbAWQiwQt85bQaqasWHb:iyZ2mlrbxghbvgVqasW7

Score
7/10
pyinstaller

Malware Config

Targets

    • Target

      telethondev.exe

    • Size

      30.9MB

    • MD5

      510bce5fa0f7c1de26a473f881c99ab8

    • SHA1

      202d54949ebda6218cd80ffb7fa9e871fc30aa7b

    • SHA256

      849ad321b52fb605bb0a7d1fed95c356f0694b5e93cc14acab5b96085a60cc5b

    • SHA512

      dd61f60f2fe036d1ab53a36f6edb779f5534ce52b5dddc1cf236ce6728263244da39075d702fee08da99922e6986ba7c983ff110064b01b169c26a12d1c4014c

    • SSDEEP

      786432:50yZ2YwUlJtb0gt3orMxITX1blbAWQiwQt85bQaqasWHb:iyZ2mlrbxghbvgVqasW7

    Score
    7/10

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix

Tasks