netdooka | 94fb2969eae7cce75c44c667332dacace155369911b425c50476d90528651584 | Triage

Sharing

General

Target

94fb2969eae7cce75c44c667332dacace155369911b425c50476d90528651584
Size

496KB
Sample

220819-ksw7wabafr
MD5

751e1e1fe86d171c81218b8791621621
SHA1

f7a3653ff4313d669d0e8d30b8a84a32d419a397
SHA256

94fb2969eae7cce75c44c667332dacace155369911b425c50476d90528651584
SHA512

58a5755e793d2691da6f2d4d93e1378ed5550fcdc0b5a8fdbfd638a016a3c4611e63c68c472bffd765085b1f404873eb27ca50ad9bd3e69e5ab6365dd04bec4b
SSDEEP

6144:9T9UbXNLfQXefCWgHga5Gp9GMvAss2407+J+XYbSdKaw+ZNnV9D/bdH1:9Z89GM4ss240GbSdPNnV9ndH

Score

10^/10

netdooka loader

Malware Config

Extracted

Family

netdooka

C2

http://93.115.21.45/gtaddress

Targets

- Target
  
  94fb2969eae7cce75c44c667332dacace155369911b425c50476d90528651584
- Size
  
  496KB
- MD5
  
  751e1e1fe86d171c81218b8791621621
- SHA1
  
  f7a3653ff4313d669d0e8d30b8a84a32d419a397
- SHA256
  
  94fb2969eae7cce75c44c667332dacace155369911b425c50476d90528651584
- SHA512
  
  58a5755e793d2691da6f2d4d93e1378ed5550fcdc0b5a8fdbfd638a016a3c4611e63c68c472bffd765085b1f404873eb27ca50ad9bd3e69e5ab6365dd04bec4b
- SSDEEP
  
  6144:9T9UbXNLfQXefCWgHga5Gp9GMvAss2407+J+XYbSdKaw+ZNnV9D/bdH1:9Z89GM4ss240GbSdPNnV9ndH
Score

6^/10
- Checks for any installed AV software in registry
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

Security Software Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2