General
- Target SF test.rar
- Size 9.7MB
- Sample260619-27eptads31
- SHA256 4ca542e3af27679c9dcbf5670abd4516c2b0259f8b59c2a249dea0b8c86f75a3
- MD5 3b86b0d2a3f6c243833a916aaed06989
- SHA1 ffb8f0ef8642238a1eb595011757f9e3b31a6dee
- SHA512 34b980dd1b16804800b9de7a9597ffe40e7761021186d178bdd5abb5cd22ed99504e6ae848223a50e478845c853d7dabf68bc48a35531323510f7adb9617a489
- SSDEEP 196608:9nAcLSYqwWDMXYB1KncSJtsVLb3IylAIJk0rk2Qwn2sRZRn:hAc+YIIYB1IzKVLDIyWq34wnrRZ9
- TLSH T106A633573F134536EAA95D23DA685F0B9CBA8C03047FB97621C04868B7FCE6494F8987
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target SF test.rar
- Size 9.7MB
- SHA256 4ca542e3af27679c9dcbf5670abd4516c2b0259f8b59c2a249dea0b8c86f75a3
- MD5 3b86b0d2a3f6c243833a916aaed06989
- SHA1 ffb8f0ef8642238a1eb595011757f9e3b31a6dee
- SHA512 34b980dd1b16804800b9de7a9597ffe40e7761021186d178bdd5abb5cd22ed99504e6ae848223a50e478845c853d7dabf68bc48a35531323510f7adb9617a489
- SSDEEP 196608:9nAcLSYqwWDMXYB1KncSJtsVLb3IylAIJk0rk2Qwn2sRZRn:hAc+YIIYB1IzKVLDIyWq34wnrRZ9
- TLSH T106A633573F134536EAA95D23DA685F0B9CBA8C03047FB97621C04868B7FCE6494F8987
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory