General

  • Target
    ohlzi4akozcdoblr.rar
  • Size 296KB
  • Sample260701-kzb6aact7z
  • SHA256 5f94db2c5c5e5b8df99debbc75782e263f37fa20f401fd345de437f796576831
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      ohlzi4akozcdoblr.rar
    • Size 296KB
    • SHA256 5f94db2c5c5e5b8df99debbc75782e263f37fa20f401fd345de437f796576831
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target
      ohlzi4akozcdoblr.exe
    • Size 515KB
    • SHA256 68de699b2885d335c90d41d37d402e83ba3bb4a4a5a08aef0290483b602dc050
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks