General
-
Target
ovcfrnzu.dll
-
Size
687KB
-
Sample
230221-rhvpmagh7v
-
MD5
37e6904d84153d1435407f4669135134
-
SHA1
e4dd1f8fc4e44c8fd0e25242d994c4b59eed6939
-
SHA256
bf3c7f0ba324c96c9a9bff6cf21650a4b78edbc0076c68a9a125ebcba0e523c9
-
SHA512
4208f016541c9868354733342f0e2813d3d0fe47de7a4f40766946172039ab1addcc6601c3dedf363cbe4f785c07cbf67b67830a3f88b3a6f17309010a8cf379
-
SSDEEP
12288:WJpOXg6QYZEEDBK51pF/0RP+xeQKg30xFAE4sLF8tW5XWQyYa7VROtv7:WSXgWYpFj+g39sLOtUyd7W1
Static task
static1
Behavioral task
behavioral1
Sample
ovcfrnzu.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ovcfrnzu.dll
Resource
win10v2004-20230220-en
Malware Config
Extracted
truebot
nefosferta.com/gate.php
Targets
-
-
Target
ovcfrnzu.dll
-
Size
687KB
-
MD5
37e6904d84153d1435407f4669135134
-
SHA1
e4dd1f8fc4e44c8fd0e25242d994c4b59eed6939
-
SHA256
bf3c7f0ba324c96c9a9bff6cf21650a4b78edbc0076c68a9a125ebcba0e523c9
-
SHA512
4208f016541c9868354733342f0e2813d3d0fe47de7a4f40766946172039ab1addcc6601c3dedf363cbe4f785c07cbf67b67830a3f88b3a6f17309010a8cf379
-
SSDEEP
12288:WJpOXg6QYZEEDBK51pF/0RP+xeQKg30xFAE4sLF8tW5XWQyYa7VROtv7:WSXgWYpFj+g39sLOtUyd7W1
Score10/10-
TrueBot payload
-
TrueBot, Silence.Downloader
A downloader attributed to Silence group first seen in 2017.
-