f53fd0626404a129dcddb8ee7589387dd7bda7999814e0df46c670af6b3da5f5

General

Target
f53fd0626404a129dcddb8ee7589387dd7bda7999814e0df46c670af6b3da5f5.zip
Size 3.1MB
Sample260701-k2mpssas3j
SHA256 f53fd0626404a129dcddb8ee7589387dd7bda7999814e0df46c670af6b3da5f5
MD5 b267acd1b7c15b18178ae9fd4974f3f4
SHA1 8aeba3c711eaa0116807c66390284dfa572d2cc7
SHA512 f6b3daa7dca039fd0d3879bf9570404d55eee2ad0d2b0e891a4eb16261c3fddc2b031f0e03f8d1c87c3f79d44811fc1a503d8d69cc149f5f9f42c39169f5785d
SSDEEP 98304:kJgyONYo5CjaEKz/wJ+IN+LbgkNLJWra/h:kJj2VDwJ+5LbhNLJCUh
TLSH
T11FE533B4E680AC47CFC4BDD6B30D3D68EE2F9E4A21CB94594121F52204C6ADD929DF62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  MOU USI-INDSR, TAIWAN/Memorandum of Understanding between USI India and INDSR Taiwan .exe
- Size 1.5MB
- SHA256 fcf4efa82d477c924d42cc6b71aa672ab2381ca256769925ae34dabe2e77e025
- MD5 c04c947efdfdd9ce24617903b6746a83
- SHA1 43d646eda4166261eb1433c7599bf5cc9129a4f1
- SHA512 5d2f4d4caaff0d04c64ccfe094be9ed683d8e408668d0dba3c9c59c5557258657d889078d4cc1fd106d53a3779fd59b8b7c18160a6a73803f20836d678454542
- SSDEEP 49152:tXnulPRNaHAPM1ICw3qHZDlrqdWRyZNtoXwU7sk+TBV99yhW4iHp8p0:5uHNagPGICw3qHZhrW1ZPoXakyV99yhu
- TLSH
  T13A758E3276A1947AC23B3630855A93F9F3B69D308E35024B36905E3E2F355D2592E72F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution persistence
- Executes dropped EXE
- Loads dropped DLL
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  MOU USI-INDSR, TAIWAN/SolidPDFCreator.dll
- Size 2.4MB
- SHA256 a43084f5af861f44c75c5273c779cb26d506cab6b51c33746626da504148a4ec
- MD5 7e7b30071565773d480578537ee3b0e6
- SHA1 bca1e295acaacbb19c7e3a7868746f6b772b7b71
- SHA512 8a39da6354721827295d77614bf60741210e96b2494596dcf7c864e699096890b0ea89fb2a3fd3c10022b68573e3689334503ac20d1e21f34d661204768b596f
- SSDEEP 49152:VQKfaknyDEOVbH6Ygzu0wJuZIPVnJ+II/VC+N3JWi98yDpyS:PfaknyDEgyzpwJqI7+ntC+N3JW9yN9
- TLSH
  T15AC53365A280D443CEC13AFFB31E3D78D90E8EB923DAD452C3B2F41504946D5929DFAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4