Overview

overview

10

Static

static

10

c15abaf51e...71.dll

windows7_x64

1

c15abaf51e...71.dll

windows10_x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    c15abaf51e78ca56c0376522d699c978217bf041a3bd3c71d09193efa5717c71
  • Size 7KB
  • Sample201217-rydzatssv6
  • SHA256 c15abaf51e78ca56c0376522d699c978217bf041a3bd3c71d09193efa5717c71
  • MD5 SHA1 SHA512
Score
10/10
backdoorsupernova

Malware Config

Signatures

  • Detected SUPERNOVA .NET web shell 1 IoCs

    SUPERNOVA is a .NET web shell backdoor masquerading as a legitimate SolarWinds web service handler. SUPERNOVA inspects and reponds to HTTP requests with the appropriate HTTP query strings, Cookies, and/or HTML form values (e.g. named codes, class, method, and args).

    backdoor
  • Supernova family
    supernova

File Explorer

  • c15abaf51e78ca56c0376522d699c978217bf041a3bd3c71d09193efa5717c71
    .dll 7KB

c15abaf51e78ca56c0376522d699c978217bf041a3bd3c71d09193efa5717c71

  • SHA256 c15abaf51e78ca56c0376522d699c978217bf041a3bd3c71d09193efa5717c71
  • MD5 SHA1 SHA512
windowsx86

  • Detected SUPERNOVA .NET web shell

    SUPERNOVA is a .NET web shell backdoor masquerading as a legitimate SolarWinds web service handler. SUPERNOVA inspects and reponds to HTTP requests with the appropriate HTTP query strings, Cookies, and/or HTML form values (e.g. named codes, class, method, and args).

    backdoor