General

  • Target
    Trial-Win-No-Cam-2.1.zip
  • Size 570KB
  • Sample260713-cnvt9abs2m
  • SHA256 02085e70f2d5db59dab0ef2554e4c73c497a2cff8b88714ddb4d72978d0c2eb8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Application.cmd
    • Size 29B
    • SHA256 7e8bd9ba64fcbd1cb753baa2f7bc8d5d7f3e91552bcdc9ec1ec04edd4916ff33
    • MD5 SHA1 SHA512
    • Executes dropped EXE

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target
      compiler.exe
    • Size 852KB
    • SHA256 8b42ca9d05badf0e7327d816a56e5516431ae34627da68e12ae9347f365b2668
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      dynasm.txt
    • Size 301KB
    • SHA256 f9436ccb986760ca379d6cd2f00726e032a1d9c250a9bd261d40d98b914e7ef9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks