Overview

overview

10

Static

static

10

d07d5d1b63...9f.exe

windows7-x64

6

d07d5d1b63...9f.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d07d5d1b63793df8c6adc2cf59bfdb8e97b32dbaa99c101b00a31a45172c329f

  • Size

    25KB

  • Sample

    220731-ga9hpsbbc8

  • MD5

    cc1e80f0566eb718d4473a31bbdcb812

  • SHA1

    95a39bfe3b6146d5f5a7f77c22e8bc4c2b078b9c

  • SHA256

    d07d5d1b63793df8c6adc2cf59bfdb8e97b32dbaa99c101b00a31a45172c329f

  • SHA512

    903035ae6820e3f78dad1f1063414794d3507d7f526be256cf00e3da5e174d90b3aa729b27993b7690fc3607fa655dea0928b31b20900c688f471635092bf7d1

Score
10/10
hancitor2210_782133

Malware Config

Extracted

Family

hancitor

Botnet

2210_782133

C2

http://pansoniterger.com/4/forum.php

http://penstinteic.ru/4/forum.php

http://rmopautham.ru/4/forum.php

Targets

    • Target

      d07d5d1b63793df8c6adc2cf59bfdb8e97b32dbaa99c101b00a31a45172c329f

    • Size

      25KB

    • MD5

      cc1e80f0566eb718d4473a31bbdcb812

    • SHA1

      95a39bfe3b6146d5f5a7f77c22e8bc4c2b078b9c

    • SHA256

      d07d5d1b63793df8c6adc2cf59bfdb8e97b32dbaa99c101b00a31a45172c329f

    • SHA512

      903035ae6820e3f78dad1f1063414794d3507d7f526be256cf00e3da5e174d90b3aa729b27993b7690fc3607fa655dea0928b31b20900c688f471635092bf7d1

    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks