General
- Target Bonavol_3.9.1.exe
- Size 709KB
- Sample260710-dkf3csdw6t
- SHA256 268a65829e86d5c3d324eea79b51e59f0a7d07c69d3ba0f700c9cb3aa772566f
- MD5 622d263f3fe7b7cdc79c20650bfa0370
- SHA1 dc81940101454948dc4b12f5b4a6a8f00c17dd98
- SHA512 86103190b30f621a61980b55b303b8a37c13586de6eee4fd7c23d8cbc600ea443b65ea49815303831457d10340fe15d043425d9eb71535e8b9bb511f1e0f5246
- SSDEEP 12288:R72vnF1GOH0+8fjf+Dmf9ElWglnENyjokryT08wGErbgYip:RMpSf7+Dmf9GWglnZyT08wqp
- TLSH T1DBF48D9ABBA445F5D5B7C13AC991894AF7B278110B319BDF03A4836F1F236D44E3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target Bonavol_3.9.1.exe
- Size 709KB
- SHA256 268a65829e86d5c3d324eea79b51e59f0a7d07c69d3ba0f700c9cb3aa772566f
- MD5 622d263f3fe7b7cdc79c20650bfa0370
- SHA1 dc81940101454948dc4b12f5b4a6a8f00c17dd98
- SHA512 86103190b30f621a61980b55b303b8a37c13586de6eee4fd7c23d8cbc600ea443b65ea49815303831457d10340fe15d043425d9eb71535e8b9bb511f1e0f5246
- SSDEEP 12288:R72vnF1GOH0+8fjf+Dmf9ElWglnENyjokryT08wGErbgYip:RMpSf7+Dmf9GWglnZyT08wqp
- TLSH T1DBF48D9ABBA445F5D5B7C13AC991894AF7B278110B319BDF03A4836F1F236D44E3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Probable phishing domain