General

  • Target
    SimbMin.exe
  • Size 6.3MB
  • Sample260711-pgvl5aas9p
  • SHA256 4ac5358ad9c9243166a41b6838be998846fbe069a78f106a5c78b6d95f0c3863
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      SimbMin.exe
    • Size 6.3MB
    • SHA256 4ac5358ad9c9243166a41b6838be998846fbe069a78f106a5c78b6d95f0c3863
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Adds Run key to start application

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v16

Tasks