Overview

overview

10

task1

 

10

task2

 

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    a038cf5f99d17df1e223aaf2f5f80b4b4a440a4e
  • Size 209KB
  • Sample191018-7wl797zm62
  • SHA256 ba6af8e68fc67d929a1567eef3a86c1ba481f4f55ee203a17b4e0ee81ec58f41
  • MD5 SHA1 SHA512
Score
10/10
1000

Malware Config

Extracted

Family

  • ursnif

Botnet

  • 1000

C2

  • http://weekends-estate.xyz

rsa_pubkey.base64
serpent.plain

Targets

    • Target
      a038cf5f99d17df1e223aaf2f5f80b4b4a440a4e
    • Size 209KB
    • SHA256 ba6af8e68fc67d929a1567eef3a86c1ba481f4f55ee203a17b4e0ee81ec58f41
    • MD5 SHA1 SHA512
    Score
    10/10

    • ursnif family

      family

    • Windows security modification

      evasiontrojan

    • Checks system information in the registry (likely anti-VM)

    • Modifies service

      persistence
    task1task2

MITRE ATT&CK Enterprise v6

Tasks