Overview

overview

10

Static

static

10

1ea570b62d...67.dll

windows7-x64

1

1ea570b62d...67.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11111956896.zip

  • Size

    4.4MB

  • MD5

    cefa9f40061da64475cc49d49ccfd9d3

  • SHA1

    50d19b0c1648991b7d50cc53def2c22c8b3d3977

  • SHA256

    78ab77661ceabd695c6c12ec32ab4a112114ec96ba8aec09f8b52337a71bd798

  • SHA512

    1b29d570f9cd6129dd59f93ccb1132e0472d23edef69e99bbf4b73b56830512e6984b86f3d6ffc41b3c79365be2f6bf504fbad16313439c5729c181dc75f2689

  • SSDEEP

    98304:0CWzukCy6x2zgqKrEoVHEbvTx2nz5emEINGZEirxlH/f1:XWDOFqK9EbvTxgz5e72ir/1

Score
10/10
credmoduleminerbackdooramadeyxmrigmountlockersunburstgrowtopia

Malware Config

Signatures

  • Amadey family
    amadey
  • Detect Amadey credential stealer module 1 IoCs
    credmodule
  • Detected Mount Locker ransomware 1 IoCs
  • Detected SUNBURST backdoor 1 IoCs

    SUNBURST is a backdoor for the SolarWinds Orion platform with extensive capabilities.

    backdoor
  • Growtopia family
    growtopia
  • Mountlocker family
    mountlocker
  • Sunburst family
    sunburst
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 11111956896.zip
    .zip

    Password: infected

  • 1ea570b62dc7c7fe52ff5655217ec452004d899b7a907b7838489869b7422867
    .dll windows x86


    Headers

    Sections