f7c861f395bfd20f34128928eb4df9921e089a90d08f889681e32f5faea48586

General

Target
Software-v3.3.zip
Size 570KB
Sample260820-gz3fpabg47
SHA256 f7c861f395bfd20f34128928eb4df9921e089a90d08f889681e32f5faea48586
MD5 7300f690d304957693d9dbfe3f4428ec
SHA1 df4f59117a7413bf01da169b8ca8cee8dca208ca
SHA512 f5a15cd16ac39dfc3d389a925b2ce6b0bd9014fa11e607834893c5c9a5443d75c2f7052d1a7ce2cb628d1880d23028bfd7ba8a95dd664d5fa25432de0b5a4db0
SSDEEP 12288:7+CGvJAevoAVcA86wlOMWROC/FTeHo22Qm7NzofOr/mShK:lWJR9cAQ4MQOC/gHozN7NzomLmt
TLSH
T193C423052521C0CEC3891F3E5BC0AAD06DF6509F9B48F5843ADFF91D79C0AA536E9B26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Application.bat
- Size 23B
- SHA256 a91b3308a7e9aa9fa660c72d27f226d8f50bfac2629f79a828fbecff323c0fe0
- MD5 cabf147518b9751e928426cf30136872
- SHA1 d92b1e743af660e5d6556c26cf7e84f9e9e87747
- SHA512 492e254a8cf8f35d77b88629810112219627094d7a8a13fad0efa1e76f1091f3050a4caba85772079963fb76c08f33a6f3026c91a65426b9cb505e1b37900a53
- MD5 SHA1 SHA512
Score

7^/10

discovery execution persistence
- Executes dropped EXE
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1 behavioral2
- Target
  buff.log
- Size 301KB
- SHA256 3989cdf958d258244f3a72bac594214112ffe1008d4d81233a5911482dd302ca
- MD5 68db393c2ef71ccf64e5e1316fc9eab6
- SHA1 dc66a58a2ba83279ae1ec43c53e27eb5cb37f816
- SHA512 c85580e8487351e48f5ad823f90b643a6915c3c04255cd7690c3da7b284d07a36bcdf03ccc6853b300615331fc4594bb8bc0923404b10e537f1da4402c756a87
- SSDEEP 3072:UHamIY/tbMtsBwIiAEckgFu3XPkYm+QzkzVQxQ/TfW1ZDoN0G+deCi9TLFR+q7d6:HmFBZTm3QqTi1dc0G79oBl17
- TLSH
  T1B264E6E091C82BD3CEBB5591DC678EAE167B24E2474A5ACE0F1CF4B43B90190D6DD81A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  load.exe
- Size 852KB
- SHA256 167b166e26dd44f580a00f2c879089c5362eff5120ac88e0701b11b1eb320ca9
- MD5 b09254ee683d91d04d52d08731dba8db
- SHA1 f0c5b4b2b1c2fb641af80181f55c711f56410418
- SHA512 77444128e19d69b49ac3e74dcf6d750c5bfc1c38efad6f479014273bc59b11d46443e2e77f961df103c4d66ecb498cacfa586714aa206fa34e5bfbf43e39b617
- SSDEEP 12288:g628L2HCSGt4FMz4+PUlv2kyK5yB1Tazo/UCjTMnvKdsoFwhiHBjBZok:92HCSucMz4CYbV5yBtaziU0TcSNFPhL
- TLSH
  T11F058E59A27401F6D9A78134C9569A4BD7B2781607205AEF03E06BB73F37BE11E3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6