General
- Target dropbox-installer.exe
- Size 85.5MB
- Sample261017-3e2vbadx2p
- SHA256 7211b2dd507ed9540a5fd3d95e444c2e59d93e59786aedc9226443244d643ba6
- MD5 2442453546787a6df7f2eba84e2c1c01
- SHA1 0db09545f89d07e0deba8857d19418224a0feb70
- SHA512 b6da89e5ae5ca33df0fe2e429b6fe5d06036882862b7c2f4da79641f8d96e8efab9f9ecacc085ba18c09882ba00c87b17f23886ad0069f2ecabc798489825758
- SSDEEP 1572864:h4f/8qYlyD+YEUZl7XNyjhQR5QMJJ8R/E0/utd0xyQZPhQrfP6oiZ+8o2jaH:afXEQlLgaR55oR/E0/kd0xlafP9
- TLSH T1A11833809C9770BBFAE999317846AC2AF5F630885F97C1DF0AD853612E17F406732672
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
dropbox-installer.exe
Resource
win10v2004-20260911-en
18 signatures
300 seconds
Malware Config
Targets
-
- Target dropbox-installer.exe
- Size 85.5MB
- SHA256 7211b2dd507ed9540a5fd3d95e444c2e59d93e59786aedc9226443244d643ba6
- MD5 2442453546787a6df7f2eba84e2c1c01
- SHA1 0db09545f89d07e0deba8857d19418224a0feb70
- SHA512 b6da89e5ae5ca33df0fe2e429b6fe5d06036882862b7c2f4da79641f8d96e8efab9f9ecacc085ba18c09882ba00c87b17f23886ad0069f2ecabc798489825758
- SSDEEP 1572864:h4f/8qYlyD+YEUZl7XNyjhQR5QMJJ8R/E0/utd0xyQZPhQrfP6oiZ+8o2jaH:afXEQlLgaR55oR/E0/kd0xlafP9
- TLSH T1A11833809C9770BBFAE999317846AC2AF5F630885F97C1DF0AD853612E17F406732672
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Peripheral Device Discovery
1Query Registry
3System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1