Overview

overview

7

Static

static

1

__zeta_kag...02.jpg

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    __zeta_kage_no_jitsuryokusha_ni_naritakute_drawn_by_ronron2439__sample-fe019c4ec452fd98156112ecfd49a802.jpg
  • Size 52KB
  • Sample260627-qb1fvsaz3s
  • SHA256 d80a7fc3bf162e797e7c71a42b4e07cc1f2fd7bfdb6210be7afed7699c642ed8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Targets

    • Target
      __zeta_kage_no_jitsuryokusha_ni_naritakute_drawn_by_ronron2439__sample-fe019c4ec452fd98156112ecfd49a802.jpg
    • Size 52KB
    • SHA256 d80a7fc3bf162e797e7c71a42b4e07cc1f2fd7bfdb6210be7afed7699c642ed8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks