General
- Target Faucet_ICU_e6d1d5487074dfa1.exe
- Size 12.7MB
- Sample260905-j3pp4sxtgy
- SHA256 180a06ab85f6540f82e93bb02e523d86ad9bcfa87a3de797bc0809bbac17aab3
- MD5 dc28372cae2cca7f9f1a06d0799fddf7
- SHA1 016875ed9ce78013bc54511a1569d5db848c3f08
- SHA512 1126e608237626b7aa3166b49ddd3aeedfc578da158ef59f85942471623015de2d33bea9cec8762cb7cf361b69835174b5e557c4d397261874d352e7ffe82e5d
- SSDEEP 196608:ifc9YRLXVYx3k3uODpj2dP7n9CGWiKzdd2RAmTQTP86I65WrwaNLgEu:ifX5X6dHO9adTnG3zdURfIxImWlNLlu
- TLSH T1F5D6F113ECA518FAC1FEA23189A291537B317C482B2223D72B50B6B86F77BD05DB5354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target Faucet_ICU_e6d1d5487074dfa1.exe
- Size 12.7MB
- SHA256 180a06ab85f6540f82e93bb02e523d86ad9bcfa87a3de797bc0809bbac17aab3
- MD5 dc28372cae2cca7f9f1a06d0799fddf7
- SHA1 016875ed9ce78013bc54511a1569d5db848c3f08
- SHA512 1126e608237626b7aa3166b49ddd3aeedfc578da158ef59f85942471623015de2d33bea9cec8762cb7cf361b69835174b5e557c4d397261874d352e7ffe82e5d
- SSDEEP 196608:ifc9YRLXVYx3k3uODpj2dP7n9CGWiKzdd2RAmTQTP86I65WrwaNLgEu:ifX5X6dHO9adTnG3zdURfIxImWlNLlu
- TLSH T1F5D6F113ECA518FAC1FEA23189A291537B317C482B2223D72B50B6B86F77BD05DB5354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.