Overview

overview

10

Static

static

sample.exe

windows7_x64

10

sample.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    291dd93ff5ffd7c8c108767855b77b3a1fbae2755cc650b884f42e1903884041.bin.sample.gz
  • Size 41KB
  • Sample210609-cb5hd5xnsj
  • SHA256 d51bea68eb60caea4b3243ee40651a7345e54127775cc47f78afeca69ceadf0d
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Credentials
  • Protocol

    smtp
  • Host

    mail.cock.li
  • Port

    587
  • Username

    [email protected]
  • Password

    jesuscrypt

Targets

    • Target
      sample
    • Size 41KB
    • SHA256 291dd93ff5ffd7c8c108767855b77b3a1fbae2755cc650b884f42e1903884041
    • MD5 SHA1 SHA512
    Score
    10/10

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks