General
- Target DigDigDie.exe
- Size 80.9MB
- Sample260724-3a516sgr61
- SHA256 2986f661c9e071be39f3fdc171df0a92cb4569fe340d2f8ba8e3188e85bf75f5
- MD5 c06368f74d31e9994909b46c07b424a2
- SHA1 e1da4eeefc0cd080f09bb61411d47aca6b8d6aca
- SHA512 f83c737a4f9143bf7b658ae35dd17c4dffa1b4639338ccd22d88874455dc7220a7cda4031b5443f7f7590f9e4172a58ee240b1d21d8a395c40b477ae43e82dd2
- SSDEEP 1572864:3JLtLozRfZCK8CfUPolm0NhL/kfk5RWKE0UpvlSz2U5fI66S57:5LZoFfF8PotNtRWv06Ni2xE7
- TLSH T1C61833370AD80B92F23166BE46C1F93BF1504E6973311BB5CA40C4B6BAE7BD0526D46E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target DigDigDie.exe
- Size 80.9MB
- SHA256 2986f661c9e071be39f3fdc171df0a92cb4569fe340d2f8ba8e3188e85bf75f5
- MD5 c06368f74d31e9994909b46c07b424a2
- SHA1 e1da4eeefc0cd080f09bb61411d47aca6b8d6aca
- SHA512 f83c737a4f9143bf7b658ae35dd17c4dffa1b4639338ccd22d88874455dc7220a7cda4031b5443f7f7590f9e4172a58ee240b1d21d8a395c40b477ae43e82dd2
- SSDEEP 1572864:3JLtLozRfZCK8CfUPolm0NhL/kfk5RWKE0UpvlSz2U5fI66S57:5LZoFfF8PotNtRWv06Ni2xE7
- TLSH T1C61833370AD80B92F23166BE46C1F93BF1504E6973311BB5CA40C4B6BAE7BD0526D46E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Enumerates processes with tasklist