Overview

overview

10

Static

static

file.ps1

windows7_x64

10

file.ps1

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file

  • Size

    133KB

  • Sample

    210922-dbp9nsahg4

  • MD5

    d1da13b36a8ae1ff9bbfb351a7684fb4

  • SHA1

    cfa975bdb93561439ab52527d5041111c1351653

  • SHA256

    23d596e8c826aa53a88baec225080b6f7d298568f2302b4b419ae57f4724914b

  • SHA512

    afa85364c76b168da16b50d74bb14c8f0bf4a77ce4dd1ac6a1462851b5e97342cf435a11ac4fae1283284d7035e554618db0d682376cf7aa87582c499e1c77b9

Score
10/10
doublebackbackdoor

Malware Config

Targets

    • Target

      file

    • Size

      133KB

    • MD5

      d1da13b36a8ae1ff9bbfb351a7684fb4

    • SHA1

      cfa975bdb93561439ab52527d5041111c1351653

    • SHA256

      23d596e8c826aa53a88baec225080b6f7d298568f2302b4b419ae57f4724914b

    • SHA512

      afa85364c76b168da16b50d74bb14c8f0bf4a77ce4dd1ac6a1462851b5e97342cf435a11ac4fae1283284d7035e554618db0d682376cf7aa87582c499e1c77b9

    Score
    10/10
    doublebackbackdoor

    • DoubleBack

      DoubleBack is a modular backdoor first seen in December 2020.

      backdoordoubleback

    • DoubleBack x64 Payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks