Overview

overview

6

Static

static

3

RetracPota... 2.exe

windows10-2004-x64

6

agent.ps1

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    RetracPotatoGraphics 2.exe
  • Size 74.4MB
  • Sample260907-ycdbqavapb
  • SHA256 73b3c4b45e6db2bdfd842ddbbb69c55c8cbc3ef15805a456d88285f1365b3124
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoveryexecutionpersistencepyinstaller

Malware Config

Targets

    • Target
      RetracPotatoGraphics 2.exe
    • Size 74.4MB
    • SHA256 73b3c4b45e6db2bdfd842ddbbb69c55c8cbc3ef15805a456d88285f1365b3124
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    defense_evasiondiscoveryexecutionpersistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1
    • Target
      agent.pyc
    • Size 248KB
    • SHA256 5c37e73b45adb5a3b5d5d14346e02c51d3a40620de2f67da145d3a5ed602ccbd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral2

MITRE ATT&CK Enterprise v16

Tasks