General

  • Target
    4128087873922b3e1b7ed3d0913bf588
  • Size 529KB
  • Sample260715-dbh6csas7k
  • SHA256 77a4eed3a1e27f3c7635cc38c3708dc95045cefb11b67521599e9c90e1ef09ef
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Launcher.cmd
    • Size 25B
    • SHA256 05ae6b542fd187c062eac38abfbfb6a9b8f35bbec3aff29950912f7d89092c5a
    • MD5 SHA1 SHA512
    • Executes dropped EXE

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks