diamondfox | 0aff63230dac9ca248ddcb00bb998cc318c93b9101365558c003c21a7fd5c474 | Triage

Submit
Reports

Overview

overview

Static

static

0aff63230d...74.exe

windows7-x64

0aff63230d...74.exe

windows10-2004-x64

Sharing

General

Target

0aff63230dac9ca248ddcb00bb998cc318c93b9101365558c003c21a7fd5c474
Size

330KB
Sample

230129-yd4v3acf61
MD5

f496c839f762140fc275be29a1307efe
SHA1

b60b56caef87f24d07db7313d2e90011b662cb68
SHA256

0aff63230dac9ca248ddcb00bb998cc318c93b9101365558c003c21a7fd5c474
SHA512

0a2c6052bbaf5b4bfbd310f73ab4d967956f3bb4cd37503a9ac58e2a181b6255864710565fd4be65f2302eaca5f5789e8993da8bd4687dc906485890e1e7e068
SSDEEP

6144:vjyPFc4tqecJ1+bKK8OPdCb7YuJNpas5wV9Su8AxVqAm:7R4tzgYbF8OPd0zJNss6GAWA

Score

10^/10

diamondfox botnet infostealer stealer

Static task

static1

Behavioral task

behavioral1

Sample

0aff63230dac9ca248ddcb00bb998cc318c93b9101365558c003c21a7fd5c474.exe

Resource

win7-20220812-en

diamondfox botnet infostealer stealer

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

0aff63230dac9ca248ddcb00bb998cc318c93b9101365558c003c21a7fd5c474.exe

Resource

win10v2004-20220901-en

diamondfox botnet infostealer stealer

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  0aff63230dac9ca248ddcb00bb998cc318c93b9101365558c003c21a7fd5c474
- Size
  
  330KB
- MD5
  
  f496c839f762140fc275be29a1307efe
- SHA1
  
  b60b56caef87f24d07db7313d2e90011b662cb68
- SHA256
  
  0aff63230dac9ca248ddcb00bb998cc318c93b9101365558c003c21a7fd5c474
- SHA512
  
  0a2c6052bbaf5b4bfbd310f73ab4d967956f3bb4cd37503a9ac58e2a181b6255864710565fd4be65f2302eaca5f5789e8993da8bd4687dc906485890e1e7e068
- SSDEEP
  
  6144:vjyPFc4tqecJ1+bKK8OPdCb7YuJNpas5wV9Su8AxVqAm:7R4tzgYbF8OPd0zJNss6GAWA
Score

10^/10

diamondfox botnet infostealer stealer
- DiamondFox
  DiamondFox is a multipurpose botnet with many capabilities.
  botnet stealer diamondfox
- DiamondFox payload
  Detects DiamondFox payload in file/memory.
  infostealer
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

diamondfoxbotnetinfostealerstealer

behavioral2

diamondfoxbotnetinfostealerstealer

© 2018-2024

Terms | Privacy