General

  • Target

    2073a3502536eb415c1b88c857277140

  • Size

    5.5MB

  • Sample

    231230-3rdcgsfeal

  • MD5

    2073a3502536eb415c1b88c857277140

  • SHA1

    df16330d6e26cc322d09dadaf248b89122a86b7f

  • SHA256

    3890c76156b937da73f9b59c7cdac230c9c0c531e3b3b548143fcdd10f1d1577

  • SHA512

    3ab21ac0884ae697f2afbe808c988d8a9ee8c665beb8d08c5f5f48a05a526b9a1b1a5b4a02eda5967bf645a31c950af0b48f993ecc982ba7cd9c16ffab4014de

  • SSDEEP

    98304:6QicYwr4ZmTt9Ce1qpZ1/v3S6KWgkN2gWqPZVoj2O:6Qi7w/tl8p/n3aVNIZVs

Malware Config

Extracted

Family

nullmixer

C2

http://watira.xyz/

Targets

    • Target

      2073a3502536eb415c1b88c857277140

    • Size

      5.5MB

    • MD5

      2073a3502536eb415c1b88c857277140

    • SHA1

      df16330d6e26cc322d09dadaf248b89122a86b7f

    • SHA256

      3890c76156b937da73f9b59c7cdac230c9c0c531e3b3b548143fcdd10f1d1577

    • SHA512

      3ab21ac0884ae697f2afbe808c988d8a9ee8c665beb8d08c5f5f48a05a526b9a1b1a5b4a02eda5967bf645a31c950af0b48f993ecc982ba7cd9c16ffab4014de

    • SSDEEP

      98304:6QicYwr4ZmTt9Ce1qpZ1/v3S6KWgkN2gWqPZVoj2O:6Qi7w/tl8p/n3aVNIZVs

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

MITRE ATT&CK Matrix

Tasks