Static task
static1
Behavioral task
behavioral1
Sample
NetfilterRootkit.07.05.2021/c664fc54853d9b50d7e33bad5bd7070e.exe
Resource
win7v20210410
Behavioral task
behavioral2
Sample
NetfilterRootkit.07.05.2021/c664fc54853d9b50d7e33bad5bd7070e.exe
Resource
win10v20210410
Behavioral task
behavioral3
Sample
NetfilterRootkit.07.05.2021/ccea678c13f13a8d6438a314e26cdc2a.exe
Resource
win7v20210410
Behavioral task
behavioral4
Sample
NetfilterRootkit.07.05.2021/ccea678c13f13a8d6438a314e26cdc2a.exe
Resource
win10v20210410
General
-
Target
NetfilterRootkit.07.05.2021.zip
-
Size
49KB
-
MD5
87f5eaf496607894c350dc206d2aff62
-
SHA1
62c8956b46d083cfe8f353ddbe53c10707263643
-
SHA256
8b7737a33688801760aa5359dd0f1feca169d35098aac02791ec3128287b83f6
-
SHA512
5267d3111b78ca9bb74e1a63c9517a811976f3da2a7d1d2fe1ac5f371824fed2baa50d52232cbc2af736721889b75f278616accf28b489ba252d0ee5d578443c
Malware Config
Signatures
-
NetFilter Payload 2 IoCs
Processes:
resource yara_rule static1/unpack001/NetfilterRootkit.07.05.2021/c664fc54853d9b50d7e33bad5bd7070e netfilter_payload static1/unpack001/NetfilterRootkit.07.05.2021/ccea678c13f13a8d6438a314e26cdc2a netfilter_payload -
Netfilter family
Files
-
NetfilterRootkit.07.05.2021.zip.zip
-
NetfilterRootkit.07.05.2021/c664fc54853d9b50d7e33bad5bd7070e.exe windows x64
-
NetfilterRootkit.07.05.2021/ccea678c13f13a8d6438a314e26cdc2a.exe windows x86