General
- Target ANGELSX.exe
- Size 2.0MB
- Sample260820-2bmqjsbn7v
- SHA256 6b88746c2cdc9284d2f5c11f5f53c68605a32ad1d45c08c875ace3e7706dcf8f
- MD5 90a00920e63e7f6348487220942a7793
- SHA1 efb555dcc3b6c8eb7f23dc37a571425b25f48e17
- SHA512 32222e78c627e121627dea616ca258f4a9563c7ffccdc1d2921e5cf180726ac9c7c19cfce7cdab6617e0c767fad3c9b8bce7de2dd4b174a263fc39bd88ffae51
- SSDEEP 24576:zBXP2RkYQmyeuOJ+D8pkL6Sqr+gcmGATCLqIa4UIXMBDpT2Pwx3CpK2AAnzx:8RBHSclLVdIwA+UC33oz
- TLSH T163A52355BA87D501C3E91A35D866D2B92871EC514992729330F9FFBFB2B301B8C222DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target ANGELSX.exe
- Size 2.0MB
- SHA256 6b88746c2cdc9284d2f5c11f5f53c68605a32ad1d45c08c875ace3e7706dcf8f
- MD5 90a00920e63e7f6348487220942a7793
- SHA1 efb555dcc3b6c8eb7f23dc37a571425b25f48e17
- SHA512 32222e78c627e121627dea616ca258f4a9563c7ffccdc1d2921e5cf180726ac9c7c19cfce7cdab6617e0c767fad3c9b8bce7de2dd4b174a263fc39bd88ffae51
- SSDEEP 24576:zBXP2RkYQmyeuOJ+D8pkL6Sqr+gcmGATCLqIa4UIXMBDpT2Pwx3CpK2AAnzx:8RBHSclLVdIwA+UC33oz
- TLSH T163A52355BA87D501C3E91A35D866D2B92871EC514992729330F9FFBFB2B301B8C222DD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.