General
-
Target
Backdoor.Win32.IRCNite.jbb1cec6181f1959c0f74b97ccefc9506b9447061d970dabc5c7e0688e9547b71a2
-
Size
159KB
-
Sample
230507-gy9hlshg5t
-
MD5
ab84d7ea8197b7b5c9e50b15339b4992
-
SHA1
e577436e97210d0ac65388b1f666d3a0a4a73ee9
-
SHA256
1cec6181f1959c0f74b97ccefc9506b9447061d970dabc5c7e0688e9547b71a2
-
SHA512
10d1f2fabfbde3962f192efb38dc701d76fd87d4fdd3194d1ec90a5380596f26d804dd1bc28752c0ad9eb76918783bf6dafe33e3d0bbd6a15e90566a59b0fc1c
-
SSDEEP
3072:iZX6JBgH9NMLvJkSo1KArzoHHAgzzInpcb:iZeqM9UKGzYHAKO
Static task
static1
Behavioral task
behavioral1
Sample
Backdoor.Win32.IRCNite.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
Backdoor.Win32.IRCNite.jbb1cec6181f1959c0f74b97ccefc9506b9447061d970dabc5c7e0688e9547b71a2
-
Size
159KB
-
MD5
ab84d7ea8197b7b5c9e50b15339b4992
-
SHA1
e577436e97210d0ac65388b1f666d3a0a4a73ee9
-
SHA256
1cec6181f1959c0f74b97ccefc9506b9447061d970dabc5c7e0688e9547b71a2
-
SHA512
10d1f2fabfbde3962f192efb38dc701d76fd87d4fdd3194d1ec90a5380596f26d804dd1bc28752c0ad9eb76918783bf6dafe33e3d0bbd6a15e90566a59b0fc1c
-
SSDEEP
3072:iZX6JBgH9NMLvJkSo1KArzoHHAgzzInpcb:iZeqM9UKGzYHAKO
-
Modifies WinLogon for persistence
-
Modifies firewall policy service
-
Modifies security service
-
Drops startup file
-
Adds Run key to start application
-