General

  • Target

    56e62d8c69ea715990644b733d95095d15610fd91eb90462193f733819eebe3e

  • Size

    200KB

  • Sample

    221124-jay33sgg98

  • MD5

    6d846499e135c7f345e0d88e651fbaa5

  • SHA1

    dcc80b060ddce243d039aca4cd16016da8b63a91

  • SHA256

    56e62d8c69ea715990644b733d95095d15610fd91eb90462193f733819eebe3e

  • SHA512

    b24b2762d930ac8166321a762f9c2b4536c6c4962d1e2fc780d8bd0e942948473b98cde33d02db373dc8647cd238985e91b642e97662b22323f4fa7add4947ef

  • SSDEEP

    6144:IdZtvXHTRdddddddddddddddddddddaW/jJtCdddddddddddddddddddddX:I7VuEE

Score
10/10

Malware Config

Extracted

Family

tofsee

C2

111.121.193.238

202.146.217.143

188.190.113.149

188.165.132.183

213.155.0.208

rgtryhbgddtyh.biz

wertdghbyrukl.ch

Targets

    • Target

      56e62d8c69ea715990644b733d95095d15610fd91eb90462193f733819eebe3e

    • Size

      200KB

    • MD5

      6d846499e135c7f345e0d88e651fbaa5

    • SHA1

      dcc80b060ddce243d039aca4cd16016da8b63a91

    • SHA256

      56e62d8c69ea715990644b733d95095d15610fd91eb90462193f733819eebe3e

    • SHA512

      b24b2762d930ac8166321a762f9c2b4536c6c4962d1e2fc780d8bd0e942948473b98cde33d02db373dc8647cd238985e91b642e97662b22323f4fa7add4947ef

    • SSDEEP

      6144:IdZtvXHTRdddddddddddddddddddddaW/jJtCdddddddddddddddddddddX:I7VuEE

    Score
    10/10
    • Tofsee

      Backdoor/botnet which carries out malicious activities based on commands from a C2 server.

MITRE ATT&CK Matrix

Tasks