General
- Target app-64.7z
- Size 128.5MB
- Sample260716-pfx1vscy5q
- SHA256 9264482de364db4c8cf88490cdeb979aca49471cb9a07577e06d21aaea7f6bc1
- MD5 1abcb0f2fccd84c80937320e9f4cea4d
- SHA1 637ee1f3b45a13dceec22ad8c646bfcc6ef8c50c
- SHA512 e090ee5f9cb3a15c53a15456202b332a6117aea95c1203cf4d2f747c113ba40b71a6f3f900e6d91beea27ad8664bd0020c7468a8ccf2abd97cb94fcfb78b772f
- SSDEEP 3145728:YPl97RkWDGxUn5LKw+ehjUrH0P3oaM8VB:SXiuAeHPvVB
- TLSH T14F583374B087C9E2DF0D5074A3215F41A6698343B654AF5E8B153898AF712FE3C2E4BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Malware Config
Targets
-
- Target SaiseGame.exe
- Size 172.1MB
- SHA256 8c8e2dda005c54aeacb7aff60ace46b0acf686c17662f4a226bd71ca2c02ec7c
- MD5 54898c2500c8278365dab880882cc83b
- SHA1 04575c45511322f1ac2a923be026a8edb783138e
- SHA512 e4136f06b785f04df2f149c10adabe1d730a83d4c1f89df3e8c5827aa5eceef9658fddcdd5d8beb4a6c0f3305566406bc14b6cb2ecbf22a721f1e6fffdd9c88f
- SSDEEP 1572864:casGSAvwGc3AWWR6cN2rxlMxg3fkRPgGFDyrakAcihuSrK6yj0Jip5hMj6xCL4N:c4fc/M+i6xCL
- TLSH T18A888C03E39A51D9E01DE1B5978B9233EE71B8454B29B2DF265407522F7BEE42B3CB10
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.