General

  • Target

    98cf46f89ef857a797749396c9eeb62c.exe

  • Size

    194KB

  • Sample

    230213-mxtzescb2z

  • MD5

    98cf46f89ef857a797749396c9eeb62c

  • SHA1

    f628c8367ff678f8907c79dfc1ce96bc4901c856

  • SHA256

    f71097bbf0ae9f1bb453692e1c1c047211478b857066ef4cd3ec813b20d5fa76

  • SHA512

    c9e7aeb464c8a0c268fb46b455f80afdd5b1c7e8c9e89442ffe263ca244a1b3bb8dd6a7001a47bf8678ba62076fa2069804817f1e5326b736da62cf0b4a8572a

  • SSDEEP

    3072:uzsOF+4cKPo1QDLBKSWPa5jnBYP/P70zU+dTWJbIOeHE0V:uzs//duLASrBYT0zUHJcOeHE

Score
10/10

Malware Config

Extracted

Family

colibri

Version

1.4.0

Botnet

Uniques

C2

http://194.4.49.243/gate.php

rc4.plain

Targets

    • Target

      98cf46f89ef857a797749396c9eeb62c.exe

    • Size

      194KB

    • MD5

      98cf46f89ef857a797749396c9eeb62c

    • SHA1

      f628c8367ff678f8907c79dfc1ce96bc4901c856

    • SHA256

      f71097bbf0ae9f1bb453692e1c1c047211478b857066ef4cd3ec813b20d5fa76

    • SHA512

      c9e7aeb464c8a0c268fb46b455f80afdd5b1c7e8c9e89442ffe263ca244a1b3bb8dd6a7001a47bf8678ba62076fa2069804817f1e5326b736da62cf0b4a8572a

    • SSDEEP

      3072:uzsOF+4cKPo1QDLBKSWPa5jnBYP/P70zU+dTWJbIOeHE0V:uzs//duLASrBYT0zUHJcOeHE

    Score
    10/10
    • Colibri Loader

      A loader sold as MaaS first seen in August 2021.

MITRE ATT&CK Matrix

Tasks