Overview

overview

10

Static

static

10

SearchIndexer.exe

windows7_x64

10

SearchIndexer.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SearchIndexer.exe
  • Size 91KB
  • Sample220113-2tr3zsdahr
  • SHA256 b8fda370e83bf776a2f4c4a23f5d701186e21984f771e878f04fe0136faf1fbf
  • MD5 SHA1 SHA512
Score
10/10
diamondfox

Malware Config

Extracted

Family

  • diamondfox

C2

  • http://timesync.live/panel/gate.php

  • http://cartierxs.bit/panel/gate.php

  • http://salamsa.bit/panel/gate.php

  • http://rockababy.bit/panel/gate.php

  • http://minon.bit/panel/gate.php

  • http://bloxfox.bit/panel/gate.php

  • http://ggbbee.bit/panel/gate.php

  • http://locksock.bit/panel/gate.php

  • http://misosoup.bit/panel/gate.php

  • http://opseckes.bit/panel/gate.php

  • http://googletabmanager.com/panel/gate.php

Mutex

  • cyjJzYyDay1EfrkaW4HRyO6y4OufUKaS

xor.plain

Signatures

  • DiamondFox payload 1 IoCs

    Detects DiamondFox payload in file/memory.

  • Diamondfox family
    diamondfox

File Explorer

  • SearchIndexer.exe
    .exe 91KB

SearchIndexer.exe

  • SHA256 b8fda370e83bf776a2f4c4a23f5d701186e21984f771e878f04fe0136faf1fbf
  • MD5 SHA1 SHA512
windowsx86

  • DiamondFox payload

    Detects DiamondFox payload in file/memory.