General

  • Target

    068c5a04584e0687bb57de1a3165f87dd9d9f4ef318eef6ef99eaa523dd7edce

  • Size

    114KB

  • Sample

    220531-gdkczsfga6

  • MD5

    9173148ca5304dd9b023744004d15657

  • SHA1

    3bbdd49b5f79749bc99c347d69f62216e6b474de

  • SHA256

    068c5a04584e0687bb57de1a3165f87dd9d9f4ef318eef6ef99eaa523dd7edce

  • SHA512

    00c4f73aa875b5520e9b0c36bb981be0890abd4ded4ce86a039d2951968ca37757ae39f98e7e9939b3db75a2d3803585690726033f5a827a7d4d7a06cb6434a1

Score
10/10

Malware Config

Targets

    • Target

      068c5a04584e0687bb57de1a3165f87dd9d9f4ef318eef6ef99eaa523dd7edce

    • Size

      114KB

    • MD5

      9173148ca5304dd9b023744004d15657

    • SHA1

      3bbdd49b5f79749bc99c347d69f62216e6b474de

    • SHA256

      068c5a04584e0687bb57de1a3165f87dd9d9f4ef318eef6ef99eaa523dd7edce

    • SHA512

      00c4f73aa875b5520e9b0c36bb981be0890abd4ded4ce86a039d2951968ca37757ae39f98e7e9939b3db75a2d3803585690726033f5a827a7d4d7a06cb6434a1

    Score
    10/10
    • suricata: ET MALWARE Generic - POST To .php w/Extended ASCII Characters

      suricata: ET MALWARE Generic - POST To .php w/Extended ASCII Characters

    • suricata: ET MALWARE Ransomware Locky CnC Beacon 2

      suricata: ET MALWARE Ransomware Locky CnC Beacon 2

    • suricata: ET MALWARE Win32/Necurs Common POST Header Structure

      suricata: ET MALWARE Win32/Necurs Common POST Header Structure

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks