6339a3f2cf2cd3f1772989309577ba5eb839c1f3601a915c4514c3484372d7ba

General

Target
Software-3.7.zip
Size 534KB
Sample260608-pepcbsc14m
SHA256 6339a3f2cf2cd3f1772989309577ba5eb839c1f3601a915c4514c3484372d7ba
MD5 9f0223ff34306a5b4c37bfdbf914c658
SHA1 746e2c2d009ec4c82c702ab326583d21636f6034
SHA512 8188d032fdb671691113da64bb5491bdddea8540f36602e514dedea52aeb52e43469439237dd8e82933087f9f8b4f9d9a33189443594d90927bbb5862b1b4626
SSDEEP 12288:oOCBcIqB0liubzqtYBpfsz4TKPozt4CTo4Pl/2Ar57:oZ+LubzqyB9sz4TKPE1l/Zrl
TLSH
T137C4239603289664787407B197BF9F8DC6028E5329921BFD9FC8BF0CA1356489D5FBC2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution persistence

Malware Config

Targets

- Target
  application.cmd
- Size 24B
- SHA256 037affc90a4bf1d6b5263756945fa92795f5a59630cab95ad17260711d023fd6
- MD5 3748cd334a64b8be2ab5fb31c7c8c403
- SHA1 c8685b932cb584ccef070098a59a8c32fe5f465f
- SHA512 cbf0f10b932ff4d4784f73f8ee8ce1d33043ef9f77f2bd7b5917c581d24e903af942e86c0d9534a9355b76ddfd875b9ab8150ace493bc3c57f43d39ad0de2308
- MD5 SHA1 SHA512
Score

7^/10

execution persistence
- Executes dropped EXE
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  ico64.txt
- Size 300KB
- SHA256 5762d9a95e545a70de685c3ae9e1d5bd6aeaae7615f5b8156da65e894a028009
- MD5 927cd1c732645b444374139b3de38857
- SHA1 93eba43520b7e99d74d59095d07c24a006a159a0
- SHA512 5afb07290a7a6674f5a364073f00c3f739180387d86e0c6a1d54edd088b47e8d95aa5b9eb8142633defd7c9ee04cd8780a83733cf0c05da96400c5044b86fc0a
- SSDEEP 6144:QdblPiZUKuxBA5jfKuDxhHzKJqbZhvSN6nnPaV6hkT5:5MojfKKbbZA3ikN
- TLSH
  T14E64F7E0F5C409B6DBEF8682DE6E8DAE15B724E2870A168E0E1DF4E03B151D1D7CDA05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  luau.exe
- Size 753KB
- SHA256 5b2009af04c34eaa891b4fb57a7b79cb94b104ff7db2b3ba7eb66446db6bf929
- MD5 99ee2d496c71b1917130a677a68e4c33
- SHA1 c086e86ac35bc5e838804984c63dc1a2182bee69
- SHA512 509655eef24a4c4b7ee9a55fd2fae004ad7182f8055435670434f35fdd61a6d38c5ef89728ea65d087b6169caa326d2b5570ed093c97e921a78e20427fe5bca6
- SSDEEP 12288:YIxb6mgscIPv+xPBPx3ph7WfsnE6VTdUZ9nUt2ZvIX/19X7BrorkLwqG:RlRcIOXrh7dEiTWZC8gXTFX
- TLSH
  T1FCF49F19FBB101FAD5B78135CD16A90BEBB2BC050624566F43E06AAB6F377210E1F325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6