General

  • Target
    newuiv3.exe
  • Size 28KB
  • Sample260723-yrd7kada34
  • SHA256 40af137afb37711ecf2b89883c938e41b74f6aebee1e1c89259c663a384d4e29
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Language
  • hta

Source
URLs
  • hta.dropper

    http://vipdelta.app/

Extracted

Language
  • hta

Source
URLs
  • hta.dropper

    https://test.dicerigger.com/

Targets

    • Target
      newuiv3.exe
    • Size 28KB
    • SHA256 40af137afb37711ecf2b89883c938e41b74f6aebee1e1c89259c663a384d4e29
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks