Overview

overview

10

Static

static

10

94fb2969ea...84.exe

windows7-x64

6

94fb2969ea...84.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    94fb2969eae7cce75c44c667332dacace155369911b425c50476d90528651584

  • Size

    496KB

  • Sample

    220819-ksw7wabafr

  • MD5

    751e1e1fe86d171c81218b8791621621

  • SHA1

    f7a3653ff4313d669d0e8d30b8a84a32d419a397

  • SHA256

    94fb2969eae7cce75c44c667332dacace155369911b425c50476d90528651584

  • SHA512

    58a5755e793d2691da6f2d4d93e1378ed5550fcdc0b5a8fdbfd638a016a3c4611e63c68c472bffd765085b1f404873eb27ca50ad9bd3e69e5ab6365dd04bec4b

  • SSDEEP

    6144:9T9UbXNLfQXefCWgHga5Gp9GMvAss2407+J+XYbSdKaw+ZNnV9D/bdH1:9Z89GM4ss240GbSdPNnV9ndH

Score
10/10
netdookaloader

Malware Config

Extracted

Family

netdooka

C2

http://93.115.21.45/gtaddress

Targets

    • Target

      94fb2969eae7cce75c44c667332dacace155369911b425c50476d90528651584

    • Size

      496KB

    • MD5

      751e1e1fe86d171c81218b8791621621

    • SHA1

      f7a3653ff4313d669d0e8d30b8a84a32d419a397

    • SHA256

      94fb2969eae7cce75c44c667332dacace155369911b425c50476d90528651584

    • SHA512

      58a5755e793d2691da6f2d4d93e1378ed5550fcdc0b5a8fdbfd638a016a3c4611e63c68c472bffd765085b1f404873eb27ca50ad9bd3e69e5ab6365dd04bec4b

    • SSDEEP

      6144:9T9UbXNLfQXefCWgHga5Gp9GMvAss2407+J+XYbSdKaw+ZNnV9D/bdH1:9Z89GM4ss240GbSdPNnV9ndH

    Score
    6/10

    • Checks for any installed AV software in registry

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Security Software Discovery

1
T1063

System Information Discovery

3
T1082

Query Registry

2
T1012

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks