General
- Target dropbox-installer.exe
- Size 85.5MB
- Sample261017-285bvshb84
- SHA256 7211b2dd507ed9540a5fd3d95e444c2e59d93e59786aedc9226443244d643ba6
- MD5 2442453546787a6df7f2eba84e2c1c01
- SHA1 0db09545f89d07e0deba8857d19418224a0feb70
- SHA512 b6da89e5ae5ca33df0fe2e429b6fe5d06036882862b7c2f4da79641f8d96e8efab9f9ecacc085ba18c09882ba00c87b17f23886ad0069f2ecabc798489825758
- SSDEEP 1572864:h4f/8qYlyD+YEUZl7XNyjhQR5QMJJ8R/E0/utd0xyQZPhQrfP6oiZ+8o2jaH:afXEQlLgaR55oR/E0/kd0xlafP9
- TLSH T1A11833809C9770BBFAE999317846AC2AF5F630885F97C1DF0AD853612E17F406732672
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
dropbox-installer.exe
Resource
win10ltsc2021-20260911-en
11 signatures
900 seconds
Behavioral task
behavioral2
Sample
dropbox-installer.exe
Resource
win11-20260911-en
6 signatures
900 seconds
Behavioral task
behavioral3
Sample
main.pyc
Resource
win10ltsc2021-20260911-en
4 signatures
900 seconds
Behavioral task
behavioral4
Sample
main.pyc
Resource
win11-20260911-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target dropbox-installer.exe
- Size 85.5MB
- SHA256 7211b2dd507ed9540a5fd3d95e444c2e59d93e59786aedc9226443244d643ba6
- MD5 2442453546787a6df7f2eba84e2c1c01
- SHA1 0db09545f89d07e0deba8857d19418224a0feb70
- SHA512 b6da89e5ae5ca33df0fe2e429b6fe5d06036882862b7c2f4da79641f8d96e8efab9f9ecacc085ba18c09882ba00c87b17f23886ad0069f2ecabc798489825758
- SSDEEP 1572864:h4f/8qYlyD+YEUZl7XNyjhQR5QMJJ8R/E0/utd0xyQZPhQrfP6oiZ+8o2jaH:afXEQlLgaR55oR/E0/kd0xlafP9
- TLSH T1A11833809C9770BBFAE999317846AC2AF5F630885F97C1DF0AD853612E17F406732672
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target main.pyc
- Size 110KB
- SHA256 8ac262fccada645bf1e61c92af940ecda0c183e69e9dd9a3d9bf23b9ba65f474
- MD5 4d1cc77c85068467e9eed52c0f7453ee
- SHA1 e43067ae6de2d6f90276be1b87f7ab7a800c82c3
- SHA512 6ff793fce244b7031935dbcd9eb189a31b877a39ae066aca88760baa1f90159a6ed4901336b48d4cb6f89d861edeb4ab798ae0b60b1bb6dca049d2df4449c3bb
- SSDEEP 768:RwErlnCErTNaP/EFEaAOIsiu5Zkj/7YuyAUws9D59AwrcPyjorXD3YlYQmECrb55:RkP8FEJSt+rIxa5eN76zSycmNs9IdVp
- TLSH T1EAB3F6BA66A48C13FEC8F57830D3DF44FB17D0016249CB17E23958AB7CCA215A995B1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10