General
- Target Kill_Internet_Driver.bat
- Size 517B
- Sample260805-qpm3pasyes
- SHA256 597b8e2ad81c4e2c72eb46bd1d1e979296c18cbcd567d682fce17fa169b56e4a
- MD5 a9d942ffa0376f71423b0125e87b8ab4
- SHA1 b95b26ebf57cbedc221b5b4564d5d48acfaf6b16
- SHA512 4d1600191008a5c6a7b30141b27371d6c0813c40430c39bc1a4dc3be3ade2b808e55e7a713a38d2bcc2bc0a444df708a373952277651e6fd9df0b94aae83b8ea
- TLSH T1E2F02BA37640AC300A528971B98BD185367FA4EF1A8CCCC54092817C8DC42ACA77AF57
- MD5 SHA1 SHA512 TLSH
Static task
static1
Malware Config
Targets
-
- Target Kill_Internet_Driver.bat
- Size 517B
- SHA256 597b8e2ad81c4e2c72eb46bd1d1e979296c18cbcd567d682fce17fa169b56e4a
- MD5 a9d942ffa0376f71423b0125e87b8ab4
- SHA1 b95b26ebf57cbedc221b5b4564d5d48acfaf6b16
- SHA512 4d1600191008a5c6a7b30141b27371d6c0813c40430c39bc1a4dc3be3ade2b808e55e7a713a38d2bcc2bc0a444df708a373952277651e6fd9df0b94aae83b8ea
- TLSH T1E2F02BA37640AC300A528971B98BD185367FA4EF1A8CCCC54092817C8DC42ACA77AF57
- MD5 SHA1 SHA512 TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.