Overview

overview

6

Static

static

1

ffd14be1f2...07.jpg

windows10-2004-x64

6

ffd14be1f2...07.jpg

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    ffd14be1f20608fed372dc8f47899307.jpg
  • Size 40KB
  • Sample260604-epgp5aay4p
  • SHA256 4077dcc7421ae3dfd861922add30a9fb678c1c3403071c5efed17c0b303e80bf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
googlediscoverypersistencephishing

Malware Config

Targets

    • Target
      ffd14be1f20608fed372dc8f47899307.jpg
    • Size 40KB
    • SHA256 4077dcc7421ae3dfd861922add30a9fb678c1c3403071c5efed17c0b303e80bf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    googlediscoverypersistencephishing

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Drops desktop.ini file(s)

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Detected potential entity reuse from brand GOOGLE.

      phishinggoogle
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks