Overview

overview

10

Static

static

10

a80e1974d6...d1.exe

windows7_x64

10

a80e1974d6...d1.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a80e1974d660acaa406fa9e7d9fa2031a3e08882e76a94da44a13ff6f4ea8ad1.bin

  • Size

    16KB

  • Sample

    220126-r9ywcsebal

  • MD5

    89695ad950eca01e2b670f5e28c41950

  • SHA1

    d3e1c60ba3253173eba04d4c1bac2c46b9840e68

  • SHA256

    a80e1974d660acaa406fa9e7d9fa2031a3e08882e76a94da44a13ff6f4ea8ad1

  • SHA512

    6cc4f6c9550fd9caad98c7c91595c2c93a4b7e20ae16f9f0c5b20923957a7fcdb805c601d984786ff9d94e8c53a003ae024b7386fcf497e0d835072e53334ae2

Score
10/10
nwormdownloaderworm

Malware Config

Extracted

Family

nworm

Version

v0.3.8

C2

20.188.45.59:4782

Mutex

3d95be1e

Targets

    • Target

      a80e1974d660acaa406fa9e7d9fa2031a3e08882e76a94da44a13ff6f4ea8ad1.bin

    • Size

      16KB

    • MD5

      89695ad950eca01e2b670f5e28c41950

    • SHA1

      d3e1c60ba3253173eba04d4c1bac2c46b9840e68

    • SHA256

      a80e1974d660acaa406fa9e7d9fa2031a3e08882e76a94da44a13ff6f4ea8ad1

    • SHA512

      6cc4f6c9550fd9caad98c7c91595c2c93a4b7e20ae16f9f0c5b20923957a7fcdb805c601d984786ff9d94e8c53a003ae024b7386fcf497e0d835072e53334ae2

    Score
    10/10
    nwormdownloaderworm

    • NWorm

      A TrickBot module used to propagate to vulnerable domain controllers.

      wormdownloadernworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks