General
- Target teams-alive-1.1.zip
- Size 571KB
- Sample260713-cphlbads31
- SHA256 d755cf199d8399fdc6a7f1b9d62136853b12566332ba37501afc18f914512fd3
Score
7/10
Malware Config
Targets
-
- Target Application.cmd
- Size 30B
- SHA256 b0f0b6e38f77c518ebfaf691d729636d82cc59dc2a329d7454e11f74a2cb2d3f
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target package.txt
- Size 302KB
- SHA256 830ec7352972fd1eb24fcaf72349ef9a27dd9f26f24552d6b68b87ffeada1212
Score3/10 -
- Target unit.exe
- Size 852KB
- SHA256 bbd438d3d7a59152f1dd5e45bb8d22ee1c07f95cfe42cebbe756aaf4feadc875
Score1/10