General

  • Target
    点击此处跳转直螃蟹官网.exe
  • Size 3.1MB
  • Sample260707-pfhaeaew9l
  • SHA256 8cbf65f9c89d3306f6c3d0025d130579e175497316f321441d0dc04a77329e10
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      点击此处跳转直螃蟹官网.exe
    • Size 3.1MB
    • SHA256 8cbf65f9c89d3306f6c3d0025d130579e175497316f321441d0dc04a77329e10
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks