General

  • Target

    4bc79bf2d2c328fc1a94b235884db6a27f5b0b9ed2e511ecec59ac573f38ed28

  • Size

    119KB

  • Sample

    220712-kqk2tsdeb3

  • MD5

    42221a3c2ef7c0b9f5292ee5f6382fc7

  • SHA1

    6621ab1500e25cc20601754f584e8197d493840a

  • SHA256

    4bc79bf2d2c328fc1a94b235884db6a27f5b0b9ed2e511ecec59ac573f38ed28

  • SHA512

    1a970195f546cb9310c8bdaee7f1cadd12ebbbd7ef84fad0ed60000c36b8e198e230bcf244a7b2962408d70438c2e8064f4bdca9bedcfdb7dbb4e2bbc8be776e

Score
10/10

Malware Config

Targets

    • Target

      4bc79bf2d2c328fc1a94b235884db6a27f5b0b9ed2e511ecec59ac573f38ed28

    • Size

      119KB

    • MD5

      42221a3c2ef7c0b9f5292ee5f6382fc7

    • SHA1

      6621ab1500e25cc20601754f584e8197d493840a

    • SHA256

      4bc79bf2d2c328fc1a94b235884db6a27f5b0b9ed2e511ecec59ac573f38ed28

    • SHA512

      1a970195f546cb9310c8bdaee7f1cadd12ebbbd7ef84fad0ed60000c36b8e198e230bcf244a7b2962408d70438c2e8064f4bdca9bedcfdb7dbb4e2bbc8be776e

    Score
    10/10
    • suricata: ET MALWARE Generic - POST To .php w/Extended ASCII Characters

      suricata: ET MALWARE Generic - POST To .php w/Extended ASCII Characters

    • suricata: ET MALWARE Ransomware Locky CnC Beacon 2

      suricata: ET MALWARE Ransomware Locky CnC Beacon 2

    • suricata: ET MALWARE Win32/Necurs Common POST Header Structure

      suricata: ET MALWARE Win32/Necurs Common POST Header Structure

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks