Overview

overview

10

task1

 

10

task2

 

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    d0a308811bd0cf98b7f3c13328f34e192ae9f07c
  • Size 154KB
  • Sample191018-dhmnstln9e
  • SHA256 749d9f1bd425a9b49b9ad6e4bcdcb1954de0ad97d6b1506f1fd41ca62ff196c6
  • MD5 SHA1 SHA512
Score
10/10
500

Malware Config

Extracted

Family

  • ursnif

Botnet

  • 500

C2

  • http://myhomesitter.fun

rsa_pubkey.base64
serpent.plain

Targets

    • Target
      d0a308811bd0cf98b7f3c13328f34e192ae9f07c
    • Size 154KB
    • SHA256 749d9f1bd425a9b49b9ad6e4bcdcb1954de0ad97d6b1506f1fd41ca62ff196c6
    • MD5 SHA1 SHA512
    Score
    10/10

    • ursnif family

      family

    • Windows security modification

      evasiontrojan

    • Checks system information in the registry (likely anti-VM)

    • Modifies service

      persistence
    task1task2

MITRE ATT&CK Enterprise v6

Tasks