General

  • Target
    google.com
  • Size 853KB
  • Sample261020-mcbmcaba75
  • SHA256 458547d88d079913200efe316cd61ddb14a7780d4c9b753da3e0526f92dcd754
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      google.com
    • Size 853KB
    • SHA256 458547d88d079913200efe316cd61ddb14a7780d4c9b753da3e0526f92dcd754
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies WinLogon for persistence

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks