Overview

overview

6

Static

static

3

Application.cmd

windows10-2004-x64

6

Application.cmd

windows11-ltsc_2024-x64

6

package.js

windows10-2004-x64

3

package.js

windows11-ltsc_2024-x64

3

unit.exe

windows10-2004-x64

1

unit.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    WEBSIT_EMAI_CONFIG_SENDE_BUL_INFOBI_WIT_3.8.zip
  • Size 571KB
  • Sample261017-pgnhtaft71
  • SHA256 289f5930a74f831035e08086b40a1e395479438fba5b58150d77fbe5a7237dbf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryexecution

Malware Config

Targets

    • Target
      Application.cmd
    • Size 30B
    • SHA256 b0f0b6e38f77c518ebfaf691d729636d82cc59dc2a329d7454e11f74a2cb2d3f
    • MD5 SHA1 SHA512
    Score
    6/10
    discoveryexecution

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1behavioral2
    • Target
      package.txt
    • Size 302KB
    • SHA256 830ec7352972fd1eb24fcaf72349ef9a27dd9f26f24552d6b68b87ffeada1212
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      unit.exe
    • Size 852KB
    • SHA256 bbd438d3d7a59152f1dd5e45bb8d22ee1c07f95cfe42cebbe756aaf4feadc875
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v16

Tasks