Overview

overview

10

Static

static

3

16c23beea2...2e.exe

windows7-x64

1

16c23beea2...2e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16c23beea2ed64892ae33e3214dcd22e

  • Size

    22KB

  • Sample

    231224-2px4fahab4

  • MD5

    16c23beea2ed64892ae33e3214dcd22e

  • SHA1

    dc3a74fb3723160a2b80fd7adb6cc006b84f3c04

  • SHA256

    0821ca98c306c5ac791e7fb80d81e5f8dc7d49f3bd88935561c1bc0d70821674

  • SHA512

    cda51458e2f038ed8e03af4dad324866428f439b086ba7d5bd6f843d6d0aa91fa5294ccde00d7bbd331c5242ffec5bdf8f5b17c0594bbe4bcd3e0378145ff8dd

  • SSDEEP

    384:I9azLT4M+GdozOWeLYRJkE6SesUynJ8Y/TISQk:IDM+GdozOWeLYR+EJPqYrz

Score
10/10
nwormdownloaderworm

Malware Config

Extracted

Family

nworm

Version

v0.3.8

C2

publicvm.camdvr.org:1933

Mutex

9c719311

Targets

    • Target

      16c23beea2ed64892ae33e3214dcd22e

    • Size

      22KB

    • MD5

      16c23beea2ed64892ae33e3214dcd22e

    • SHA1

      dc3a74fb3723160a2b80fd7adb6cc006b84f3c04

    • SHA256

      0821ca98c306c5ac791e7fb80d81e5f8dc7d49f3bd88935561c1bc0d70821674

    • SHA512

      cda51458e2f038ed8e03af4dad324866428f439b086ba7d5bd6f843d6d0aa91fa5294ccde00d7bbd331c5242ffec5bdf8f5b17c0594bbe4bcd3e0378145ff8dd

    • SSDEEP

      384:I9azLT4M+GdozOWeLYRJkE6SesUynJ8Y/TISQk:IDM+GdozOWeLYR+EJPqYrz

    Score
    10/10
    nwormdownloaderworm

    • NWorm

      A TrickBot module used to propagate to vulnerable domain controllers.

      wormdownloadernworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks