Overview

overview

10

Static

static

1

f71097bbf0...76.exe

windows7-x64

10

f71097bbf0...76.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f71097bbf0ae9f1bb453692e1c1c047211478b857066ef4cd3ec813b20d5fa76

  • Size

    194KB

  • Sample

    230217-s5szzsgb54

  • MD5

    98cf46f89ef857a797749396c9eeb62c

  • SHA1

    f628c8367ff678f8907c79dfc1ce96bc4901c856

  • SHA256

    f71097bbf0ae9f1bb453692e1c1c047211478b857066ef4cd3ec813b20d5fa76

  • SHA512

    c9e7aeb464c8a0c268fb46b455f80afdd5b1c7e8c9e89442ffe263ca244a1b3bb8dd6a7001a47bf8678ba62076fa2069804817f1e5326b736da62cf0b4a8572a

  • SSDEEP

    3072:uzsOF+4cKPo1QDLBKSWPa5jnBYP/P70zU+dTWJbIOeHE0V:uzs//duLASrBYT0zUHJcOeHE

Score
10/10
colibriuniquesloader

Malware Config

Extracted

Family

colibri

Version

1.4.0

Botnet

Uniques

C2

http://194.4.49.243/gate.php

rc4.plain

Targets

    • Target

      f71097bbf0ae9f1bb453692e1c1c047211478b857066ef4cd3ec813b20d5fa76

    • Size

      194KB

    • MD5

      98cf46f89ef857a797749396c9eeb62c

    • SHA1

      f628c8367ff678f8907c79dfc1ce96bc4901c856

    • SHA256

      f71097bbf0ae9f1bb453692e1c1c047211478b857066ef4cd3ec813b20d5fa76

    • SHA512

      c9e7aeb464c8a0c268fb46b455f80afdd5b1c7e8c9e89442ffe263ca244a1b3bb8dd6a7001a47bf8678ba62076fa2069804817f1e5326b736da62cf0b4a8572a

    • SSDEEP

      3072:uzsOF+4cKPo1QDLBKSWPa5jnBYP/P70zU+dTWJbIOeHE0V:uzs//duLASrBYT0zUHJcOeHE

    Score
    10/10
    colibriuniquesloader

    • Colibri Loader

      A loader sold as MaaS first seen in August 2021.

      loadercolibri
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks