General

  • Target
    7788b473cee44a648b54331317bdd7202cd3b4f646af0acc2b880ed3f8e33a1d
  • Size 4.4MB
  • Sample260922-lnjawsshqe
  • SHA256 7788b473cee44a648b54331317bdd7202cd3b4f646af0acc2b880ed3f8e33a1d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      7788b473cee44a648b54331317bdd7202cd3b4f646af0acc2b880ed3f8e33a1d
    • Size 4.4MB
    • SHA256 7788b473cee44a648b54331317bdd7202cd3b4f646af0acc2b880ed3f8e33a1d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks