General

  • Target

    dgfhymeythn.exe

  • Size

    70.1MB

  • Sample

    250330-zqqdwayqz2

  • MD5

    97cd6f7de95f8cda26b58d30d070a8ae

  • SHA1

    ab036a090d7d373194f83344c25e0e1d89aae390

  • SHA256

    2c6a34d7a908fd03640f4fc7b9f263ad52b2a63ee4c6eefc8172226cf1d74a73

  • SHA512

    10efb85b9b84c4dfadb61212b49ef73ff13600b34b2dd0f4bccb40f592f7908f744194137e0e10f3c9c77023c1f4d6112adf210bb85a675a1931687c3a857595

  • SSDEEP

    1572864:4Ku7PFfyVd1AEJ5Rh1+BDDy4gds8KN2BBcAhPyEwESHdY1:4KWN6Vd1AY5bADDxgds8mAhPcESHC

Score
7/10

Malware Config

Targets

    • Target

      dgfhymeythn.exe

    • Size

      70.1MB

    • MD5

      97cd6f7de95f8cda26b58d30d070a8ae

    • SHA1

      ab036a090d7d373194f83344c25e0e1d89aae390

    • SHA256

      2c6a34d7a908fd03640f4fc7b9f263ad52b2a63ee4c6eefc8172226cf1d74a73

    • SHA512

      10efb85b9b84c4dfadb61212b49ef73ff13600b34b2dd0f4bccb40f592f7908f744194137e0e10f3c9c77023c1f4d6112adf210bb85a675a1931687c3a857595

    • SSDEEP

      1572864:4Ku7PFfyVd1AEJ5Rh1+BDDy4gds8KN2BBcAhPyEwESHdY1:4KWN6Vd1AY5bADDxgds8mAhPcESHC

    Score
    7/10
    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks