General

  • Target
    VoiceModCrack.exe
  • Size 14.0MB
  • Sample260817-l3q92sysaz
  • SHA256 bd3aa66b5ef3cb22f71d5b6d70a3d01ac19a55b455237ed4625bf50bfa966edb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      VoiceModCrack.exe
    • Size 14.0MB
    • SHA256 bd3aa66b5ef3cb22f71d5b6d70a3d01ac19a55b455237ed4625bf50bfa966edb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies WinLogon for persistence

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks