General
- Target io_pgmonitorbrasil_github_v3.9.zip
- Size 498KB
- Sample260729-ameqjacg65
- SHA256 608b3a488777054291fc13d8805cf22b8d16e2dfed08446e425d34407867aea2
Score
7/10
Malware Config
Targets
-
- Target Launcher.cmd
- Size 25B
- SHA256 ef8728febd42479bc42b6977a98d5183752442d1130ce6e10507aa7190a75732
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target icon.txt
- Size 289KB
- SHA256 f6d59ebd26898cd89bfae86d02f2fb71aeadf255f75d144b59f19dcefc8f82a5
Score3/10 -
- Target reinit.exe
- Size 636KB
- SHA256 5b6f8ee0072386b4b63cbcb8f83ef010005d4b6ed3cbd906a094a69726475d62
Score3/10
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2JavaScript
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1