Overview

overview

10

Static

static

10

cf0e40628b...78.exe

windows7_x64

6

cf0e40628b...78.exe

windows10_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf0e40628bf7472926605576ba2250520b5dc8cf99d9d6eb78357d4fcad4d278

  • Size

    26KB

  • Sample

    211101-r6qqksfacn

  • MD5

    dedec1a6104f9dfb8d7a4c592bffa6fe

  • SHA1

    401bb6b5b5965e65b6c141f184e97a8494281aa9

  • SHA256

    cf0e40628bf7472926605576ba2250520b5dc8cf99d9d6eb78357d4fcad4d278

  • SHA512

    75ddad8c616dbba86dcb0c8fdcaf3e779124f58b5c37de4cca2c8c9db935867feae80e76f955b06b405b4cf866b4065f89b8ac5e78ee35ded06e89b4abc72703

Score
10/10
hancitor06111

Malware Config

Extracted

Family

hancitor

Botnet

06111

C2

http://fabickng.ru/7/forum.php

http://fineladiver.ru/7/forum.php

http://albilverde.com/7/forum.php

Targets

    • Target

      cf0e40628bf7472926605576ba2250520b5dc8cf99d9d6eb78357d4fcad4d278

    • Size

      26KB

    • MD5

      dedec1a6104f9dfb8d7a4c592bffa6fe

    • SHA1

      401bb6b5b5965e65b6c141f184e97a8494281aa9

    • SHA256

      cf0e40628bf7472926605576ba2250520b5dc8cf99d9d6eb78357d4fcad4d278

    • SHA512

      75ddad8c616dbba86dcb0c8fdcaf3e779124f58b5c37de4cca2c8c9db935867feae80e76f955b06b405b4cf866b4065f89b8ac5e78ee35ded06e89b4abc72703

    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks