General
- Target FACEIT AC.lnk
- Size 880B
- Sample260720-q3hp5ad18s
- SHA256 1c6cf2f72a859e843ed6757abf19bd8422f2add32bd0014f6d2d838ec1ee2ada
- MD5 a06ea33ac921f269051c59c9fef10f0d
- SHA1 2805a521fc82ab35b72fb8741a7e2460bb7fa948
- SHA512 e350c2ffb800afc7784d878e3c030f14386b3a85105a8c58c822e9a0ac02c54c09eeffd7220fdaef2db66c6da9f8a238b889162144d17044f7871da5da403ce8
- TLSH T17411DC0026E26E6EE1F2C1712EF267316A35F94263688B0F90C902CC4A383009E59B6A
- MD5 SHA1 SHA512 TLSH
Static task
static1
Malware Config
Targets
-
- Target FACEIT AC.lnk
- Size 880B
- SHA256 1c6cf2f72a859e843ed6757abf19bd8422f2add32bd0014f6d2d838ec1ee2ada
- MD5 a06ea33ac921f269051c59c9fef10f0d
- SHA1 2805a521fc82ab35b72fb8741a7e2460bb7fa948
- SHA512 e350c2ffb800afc7784d878e3c030f14386b3a85105a8c58c822e9a0ac02c54c09eeffd7220fdaef2db66c6da9f8a238b889162144d17044f7871da5da403ce8
- TLSH T17411DC0026E26E6EE1F2C1712EF267316A35F94263688B0F90C902CC4A383009E59B6A
- MD5 SHA1 SHA512 TLSH
-
A potential corporate email address has been identified in the URL: [email protected]
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.