General
- Target prankware.exe
- Size 30KB
- Sample260908-dch7racf72
- SHA256 e90f26489515f08cb2e018afb894849eff44dcb1eb32d6afcdd0b260ae509270
- MD5 62e3de48e180ad9c8b6b6a5b3a432efe
- SHA1 7e316b0ae25b1165001565c45b1b8bbef6dd1e3b
- SHA512 26b6f330fba1f8c3654b2c421e646593b80b6238204b74bd05b4dd15347978a7b5b98a4b5c68fdddce24ffc8443c0c24640c683e81fa689050743ee4ba2a3303
- SSDEEP 384:AbxLeJajabzvEStUc0Gloz6vwhxjR4y3wuWW8IrN3D0qI5sPc0vY5LKI5pA:BXVY64rR4y3rWWTp3D0q3Pc0vY52I5
- TLSH T1BAE27C0BAB8B48FDD06BC17DCD725926E635B915634186DF23A2822A0F263E06D33643
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target prankware.exe
- Size 30KB
- SHA256 e90f26489515f08cb2e018afb894849eff44dcb1eb32d6afcdd0b260ae509270
- MD5 62e3de48e180ad9c8b6b6a5b3a432efe
- SHA1 7e316b0ae25b1165001565c45b1b8bbef6dd1e3b
- SHA512 26b6f330fba1f8c3654b2c421e646593b80b6238204b74bd05b4dd15347978a7b5b98a4b5c68fdddce24ffc8443c0c24640c683e81fa689050743ee4ba2a3303
- SSDEEP 384:AbxLeJajabzvEStUc0Gloz6vwhxjR4y3wuWW8IrN3D0qI5sPc0vY5LKI5pA:BXVY64rR4y3rWWTp3D0q3Pc0vY52I5
- TLSH T1BAE27C0BAB8B48FDD06BC17DCD725926E635B915634186DF23A2822A0F263E06D33643
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.