74d3c4616e30a928daa98d2e17830bc063c145031d30c9d5e387e2b09dc8c904

General

Target
panel-file (9).exe
Size 76.6MB
Sample260426-vbftnsbz2z
SHA256 74d3c4616e30a928daa98d2e17830bc063c145031d30c9d5e387e2b09dc8c904
MD5 8f4c90fdd49872754f7506a1af8fd8d9
SHA1 f72e3deda7633ff6dea7ba8d4ef09a27fc039893
SHA512 389b24e35066f4d0a9bfa45602c62be317243c4dd1f58dc7e9c7b29bc196f553a44e5b90b09421158cadc0366c1f314592cbc0ac8f6aa9fcce802eec4ed4c384
SSDEEP 1572864:tqPnddZnm+vWlM9ojCrD4WWJvKSc/JUNny11adunnM9lzSwgY0odH0piSqjY:khelKbDSc/iFuM9lipiSq
TLSH
T1100833454E41888BE85ED23696E48D57D177789969924F8B07F009793EEB3C8CE3FE20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

persistence pyinstaller

Malware Config

Targets

- Target
  panel-file (9).exe
- Size 76.6MB
- SHA256 74d3c4616e30a928daa98d2e17830bc063c145031d30c9d5e387e2b09dc8c904
- MD5 8f4c90fdd49872754f7506a1af8fd8d9
- SHA1 f72e3deda7633ff6dea7ba8d4ef09a27fc039893
- SHA512 389b24e35066f4d0a9bfa45602c62be317243c4dd1f58dc7e9c7b29bc196f553a44e5b90b09421158cadc0366c1f314592cbc0ac8f6aa9fcce802eec4ed4c384
- SSDEEP 1572864:tqPnddZnm+vWlM9ojCrD4WWJvKSc/JUNny11adunnM9lzSwgY0odH0piSqjY:khelKbDSc/iFuM9lipiSq
- TLSH
  T1100833454E41888BE85ED23696E48D57D177789969924F8B07F009793EEB3C8CE3FE20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  elitepanel.pyc
- Size 259KB
- SHA256 68396d11e4780e36558e44aae0ebadd0ab83165dec233d09054bd121c5b34aa3
- MD5 45a6fa7676eb5b189c0506b929361371
- SHA1 78f953dbc317e1fd35b35c1dc60fda8f522e2ed7
- SHA512 1fb709ce090148e68d54f8f6233b7e4d7c52b5d70d4c9a5c59954b15083a7cae584846efed3cd63f586f1543fcb076891349425b20cbd15db04318a6a38010da
- SSDEEP 1536:5HEoKiZB4HwWeZy4OmOvZqdpkbsKRXH6etGj68v29TqZJtd3k1tc+MSOH8yRv9cT:d6KSeZK5smXHnWO9Tqrt+1SdeyRS3
- TLSH
  T131440979B9341563EE98F93831D29EA1F72381827200CB17D21C9CFD7EDA7469EA521C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3 behavioral4