Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

• • Target
    0e48484fd5ac74c9b788906ac0bedcb1dceaed63c7e1895de7d8e490a9cfaaac.exe
  • Size 5.4MB
  • SHA256 0e48484fd5ac74c9b788906ac0bedcb1dceaed63c7e1895de7d8e490a9cfaaac
  • MD5 7e5c6de79bac203b32caa6ca71ca311c
  • SHA1 e394fdfe0762c1448f1a6192d491788c6eae907f
  • SHA512 7b0db1696c1e7d1c4212bebeade8fa60d413fe1b6b21602677540eed1c47660e1966ec3afc6bfb6b49ae9f8cf399df393d52091d694ad32d54e12d0a2ac7e79f
  • SSDEEP 98304:jhgtsTICDtPfeE/jowqK5LN1KQ0oTh2M9QrABlolllXHNAMZr6uG:AsTICteErownP0oTcMsABqljkB
  • TLSH
    T1B7463308B3E809E1E5B3E13985665221D873B42547B0D5CF43AC9B661F637E0AF7EB50
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoverypersistenceprivilege_escalation

  • Creates a file in the Startup directory

    A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    persistenceprivilege_escalation

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Adds Run key to start application

    persistence

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

    discovery

  • Hide Artifacts: Hidden Files and Directories

    defense_evasion
  behavioral1behavioral2