64ab630c0e9351287a39a59ec6263293d8330ff930af56a892afbb3622f45faa

General

Target
app-neergz-web-v2.9.zip
Size 528KB
Sample260827-ak16rafh57
SHA256 64ab630c0e9351287a39a59ec6263293d8330ff930af56a892afbb3622f45faa
MD5 5d7ae0c73b789837e8bf37ad1e871b4d
SHA1 4b5078096982b64987d775957b00c784e69e7370
SHA512 1376f550bf25c6e45b1c9befba445e3676c11f41be126fc99e181abeecf1c2f2aa77373fd0ed3f68985b2accba8a778d670d8fc98e7980dd05cd2803a0db81ca
SSDEEP 12288:h4lhhLoVDI2FLmMJK2eqO3g/ALyYG0ZaDajTCXMO8xzDOeDBi:exopIAmMJyA/f0Za6TCXKBxFi
TLSH
T1C6B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E5D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  App.bat
- Size 29B
- SHA256 a96ffc9f649333f9e84b7a7e1101cf85f7a5f143253db1d7853e6e48d46b3c72
- MD5 6763da0e8a0778b62bd2bc404bfa1e1b
- SHA1 0a9e04d5e85702f53301d0e424305a4e20e1ebd2
- SHA512 36bd96a17730f29e2e7cdfdc1a515e85dce94ccb10d4d7fe0d9502b1794da0c274aaee5bef185933ce1de57f9bcd5ef6c76af578fadd905b32df695cea8afe80
- MD5 SHA1 SHA512
Score

6^/10

discovery execution
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1 behavioral2
- Target
  icon16.txt
- Size 289KB
- SHA256 33250ded61c43128b6c29b01de7b1cc962b241b236933f54bc42b648afae2398
- MD5 8d818e3923c032d9bc233ef67be430fe
- SHA1 66b64a0313384c8c5d39f764183e60c0cc74ff49
- SHA512 794f252ac654c3dc181c603e2489d982847c48084e14fe09c0bf80f67b485901ca7674136db95eaebbd3c5992282b458b189333b2f7305870c5d135b6597bd70
- SSDEEP 6144:9zMxJhKjorjuFGnEPMTgy77tEcpvACCI6mgT4f2D:BehKjorjuFGEPMTL77trpAyZgU8
- TLSH
  T1E554D6F014480CDEFAAB96C1DC738EA61573E8F98A4B264B0F7CF4A13654591C6EEC16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  resolver.exe
- Size 753KB
- SHA256 3200b7d6a42fc8d2bf213cd17b1bd6f0fc76c4f626330ec6fb0a3f9a0ef9e00e
- MD5 a643386d4af0ce1d488dbcaaa393a2d4
- SHA1 6173c53637ae562e6a7ac0c449210767615512b4
- SHA512 53a7a1157bb1ae1864743b4c3e66fbf4786ee805ff111261b7cba7e042954797574df06f128340fcc6a57761f5bec08da5d3692d2edaeabc00c4460423d90f83
- SSDEEP 12288:zIxb6mgscIPv+xPBPx3ph7WfsnE6VTdUZ9nUt2ZvIX/19X7BroWkLwqG:olRcIOXrh7dEiTWZC8gXTFW
- TLSH
  T1C6F49F19FBB101FAD5B78135CD16A90BEBB2BC050624566F43E06AAB6F377210E1F325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6