General

  • Target
    http://110.37.26.69:40361/i
  • Sample260810-ws5d2ahg24
Score
8/10

Malware Config

Targets

    • Target
      http://110.37.26.69:40361/i
    Score
    8/10
    • Patched UPX-packed file

      Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks