diamondfox | c481825776c06d28a2e1797c6b48d86b84132274f5c91f5a7f27f959a28d6769 | Triage

Submit
Reports

Overview

overview

Static

static

c481825776...69.exe

windows7-x64

c481825776...69.exe

windows10-2004-x64

Sharing

General

Target

c481825776c06d28a2e1797c6b48d86b84132274f5c91f5a7f27f959a28d6769
Size

260KB
Sample

230129-yd3m1abb96
MD5

f792fde5cbdc10687e9858778866e89d
SHA1

9e3ec7dbc7b14607fbd9308f66307a36a41024db
SHA256

c481825776c06d28a2e1797c6b48d86b84132274f5c91f5a7f27f959a28d6769
SHA512

bde3691e128e79067ae8fbe554b3181895947a24b5f016fd989ad6e8d3eaa6ae083e8c19e78bd70776c6411b80406b20f64a2ac3125783fb3be4f86b727e4475
SSDEEP

6144:GrsKkfPhLCay2XnlehQQjABRqmx8rn/OuG:gsKQPh3y4ehQQYj8a

Score

10^/10

diamondfox botnet infostealer stealer

Static task

static1

Behavioral task

behavioral1

Sample

c481825776c06d28a2e1797c6b48d86b84132274f5c91f5a7f27f959a28d6769.exe

Resource

win7-20220901-en

diamondfox botnet infostealer stealer

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

c481825776c06d28a2e1797c6b48d86b84132274f5c91f5a7f27f959a28d6769.exe

Resource

win10v2004-20220812-en

diamondfox botnet infostealer stealer

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  c481825776c06d28a2e1797c6b48d86b84132274f5c91f5a7f27f959a28d6769
- Size
  
  260KB
- MD5
  
  f792fde5cbdc10687e9858778866e89d
- SHA1
  
  9e3ec7dbc7b14607fbd9308f66307a36a41024db
- SHA256
  
  c481825776c06d28a2e1797c6b48d86b84132274f5c91f5a7f27f959a28d6769
- SHA512
  
  bde3691e128e79067ae8fbe554b3181895947a24b5f016fd989ad6e8d3eaa6ae083e8c19e78bd70776c6411b80406b20f64a2ac3125783fb3be4f86b727e4475
- SSDEEP
  
  6144:GrsKkfPhLCay2XnlehQQjABRqmx8rn/OuG:gsKQPh3y4ehQQYj8a
Score

10^/10

diamondfox botnet infostealer stealer
- DiamondFox
  DiamondFox is a multipurpose botnet with many capabilities.
  botnet stealer diamondfox
- DiamondFox payload
  Detects DiamondFox payload in file/memory.
  infostealer
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

diamondfoxbotnetinfostealerstealer

behavioral2

diamondfoxbotnetinfostealerstealer

© 2018-2024

Terms | Privacy