Overview

overview

8

Static

static

3

gang nuker.exe

windows7-x64

8

gang nuker.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    gang nuker.exe

  • Size

    13.9MB

  • Sample

    221218-1qv5ssdg84

  • MD5

    fc0a1b2efcfcd21e8856113315710397

  • SHA1

    20c513d25ce6efa547ba6fd751d12bffa71eb20e

  • SHA256

    d34693ef25f630be8b2f767f8d64bbd0305bb4f613eb5b40dbb532b92f3b4b90

  • SHA512

    0005f918ba9b66861357cd6eaa0c0198f837ebcfc082a79d7da6662f7bb4475f89d44bdb24cb0a6f491e89ff0aed8794a15556ed7cb347b2cc321b746074270c

  • SSDEEP

    196608:h8XZAliXlkFJ9hyehNJm3AqNKDnO8NpkSgsAGKaR2Nxmyty83uGrI4wbYHT:cZAlwlqrb/m3pQDOEkSgsv6yUuPYH

Score
8/10
pyinstallerupx

Malware Config

Targets

    • Target

      gang nuker.exe

    • Size

      13.9MB

    • MD5

      fc0a1b2efcfcd21e8856113315710397

    • SHA1

      20c513d25ce6efa547ba6fd751d12bffa71eb20e

    • SHA256

      d34693ef25f630be8b2f767f8d64bbd0305bb4f613eb5b40dbb532b92f3b4b90

    • SHA512

      0005f918ba9b66861357cd6eaa0c0198f837ebcfc082a79d7da6662f7bb4475f89d44bdb24cb0a6f491e89ff0aed8794a15556ed7cb347b2cc321b746074270c

    • SSDEEP

      196608:h8XZAliXlkFJ9hyehNJm3AqNKDnO8NpkSgsAGKaR2Nxmyty83uGrI4wbYHT:cZAlwlqrb/m3pQDOEkSgsv6yUuPYH

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks