General

  • Target
    e833b7c2b0a0e1b3d9914a3e80e7738eab7453685d864e7a9668387dd0a247d0
  • Size 463KB
  • Sample220414-hmttfsadc2
  • SHA256 e833b7c2b0a0e1b3d9914a3e80e7738eab7453685d864e7a9668387dd0a247d0
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      ISF-10+2 ?? WTXLAX200007.scr
    • Size 811KB
    • SHA256 8616545829272fd918765d945bb44e610852b995be21965577b77cfea4868007
    • MD5 SHA1 SHA512
    • DiamondFox

      DiamondFox is a multipurpose botnet with many capabilities.

    • DiamondFox payload

      Detects DiamondFox payload in file/memory.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks