bdfa6c4838f637f53a8ce7971442ca600a9247592f8ca2cec2fb4a9ccabc088e

General

Target
but.zip
Size 478KB
Sample260807-tk2l3agp9s
SHA256 bdfa6c4838f637f53a8ce7971442ca600a9247592f8ca2cec2fb4a9ccabc088e
MD5 735478a3923d7918d6e4242c7b1730b3
SHA1 cbb3a50c9a945d51f18aa564f7e44f00119374f9
SHA512 b98c683ac9847c752831d91405a11b28c8d01e2c4a56db484ac02bc755a2d903df2a8f721d4e781908e602e0a3144872de238ede0740a8bcc21a8823bec2fe74
SSDEEP 12288:JM1SUkFbFUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZ6:JMLkF5Uv4t1cNk/wjibhv4b2On4
TLSH
T121A4239274B67D4EC055DFA88C8074CBE1AE013D641A37D653A399C9B9A8036BF4BF13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  Application.cmd
- Size 33B
- SHA256 24cdfb100ad9f06798f0c21f5912a98f0c954ffb3477adae9cf86e8521b999f2
- MD5 04f9eab73b35e8047bfb0cdb56418722
- SHA1 2de7694a6ffc46c4bd7bda7955200d664e0a8781
- SHA512 f524b872231b1aa82e37b2077dccbeb25fa92092959511d7d415dcf7792ec7a3be21c4283939584e5793bb0098e9fe1064a8445f6dc0821f3b71af05d8855ae0
- MD5 SHA1 SHA512
Score

6^/10

discovery execution
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1
- Target
  certificate.txt
- Size 194KB
- SHA256 0eee2765392e97b8d2ef2601752daa740bd0240623af4a20a0e6a0636a2e2f8d
- MD5 f36ee1005df52bb47c43e2ed4105dc77
- SHA1 7cfe8e665a066af06f99c17f016fc24739329c12
- SHA512 8975b189e6055f2045a290ee7fcca51a7e11790ac91274f0a559016328201f64358919989565e660ec48c63fa62a3d97328683630787d9383b21ba5389607c20
- SSDEEP 1536:/whgW0nUaGpW/p8A7A4iTTTCQw8eKxqB2nRU9HtK4IymAnwVpwVkWt6wGPFGvuIG:/OgW021JxbR68Vpwj69QSavBkKt8gC
- TLSH
  T1EF141C5091CD1CBEE6DB82A0DC5BA99B64F7CDE0070D278A0F14E5AE36B05B1D6CD81B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  utility.exe
- Size 742KB
- SHA256 e227d47facf0e2f5b9e5c54a23a86b31272696b64bbbb9932a31fe06973677bd
- MD5 7a59df9ee2ae38c391b60c001d8fef11
- SHA1 a5fa49ca3da03fb01f2a96fa99521f263665f9ff
- SHA512 8237b3fd2a41a08bfb8ca95060e1a7f8b030538d587746b1b050d1ce0f2a6f4898ff31e65243c97e6b343a8112159839cfa85f47ecffc20a621dac64cf947b7a
- SSDEEP 12288:PFsr3uNFZnKsXrLdiu7c7nu86VDfU/+tZxMUJ4EBiSxsyYA:PFs4FZnKsrLdiCUMs/KiesyYA
- TLSH
  T184F4BF81B6D381F3D992117148B9A77A0E3D6D1007259CEB83D43AF68D346C0AF776AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3