General

  • Target

    Tooxan — .exe

  • Size

    17.9MB

  • Sample

    240630-we9rla1gkh

  • MD5

    6a9c9facb2db3fd0d932f53b36215b3d

  • SHA1

    2c93ccd14ef5ec09ea245dcd4d5f1c20fe58522d

  • SHA256

    b28ea8723dd87381795974301ed6077f1549fd439630f2b584f0ad30706d6d6b

  • SHA512

    3165928da6050b9eb5650098880bbf1e0815d44db8ee5e80cc545d97eb08e8e252f76896c3f9a1f9a05d3ae73c1235f0904bc780048db21a25b5238aeceab857

  • SSDEEP

    393216:senwW+eGQRJxI6pqLZE/pC1GMTozGxu8C0ibftQFUlHpUkqDR8JVUjhWkLbsmto:sSwW+e5RJqBVOpkoztZ08Q2pUkqDRu+G

Score
7/10

Malware Config

Targets

    • Target

      Tooxan — .exe

    • Size

      17.9MB

    • MD5

      6a9c9facb2db3fd0d932f53b36215b3d

    • SHA1

      2c93ccd14ef5ec09ea245dcd4d5f1c20fe58522d

    • SHA256

      b28ea8723dd87381795974301ed6077f1549fd439630f2b584f0ad30706d6d6b

    • SHA512

      3165928da6050b9eb5650098880bbf1e0815d44db8ee5e80cc545d97eb08e8e252f76896c3f9a1f9a05d3ae73c1235f0904bc780048db21a25b5238aeceab857

    • SSDEEP

      393216:senwW+eGQRJxI6pqLZE/pC1GMTozGxu8C0ibftQFUlHpUkqDR8JVUjhWkLbsmto:sSwW+e5RJqBVOpkoztZ08Q2pUkqDRu+G

    Score
    7/10
    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks