General

  • Target

    16c23beea2ed64892ae33e3214dcd22e

  • Size

    22KB

  • Sample

    231230-m7t26sgga3

  • MD5

    16c23beea2ed64892ae33e3214dcd22e

  • SHA1

    dc3a74fb3723160a2b80fd7adb6cc006b84f3c04

  • SHA256

    0821ca98c306c5ac791e7fb80d81e5f8dc7d49f3bd88935561c1bc0d70821674

  • SHA512

    cda51458e2f038ed8e03af4dad324866428f439b086ba7d5bd6f843d6d0aa91fa5294ccde00d7bbd331c5242ffec5bdf8f5b17c0594bbe4bcd3e0378145ff8dd

  • SSDEEP

    384:I9azLT4M+GdozOWeLYRJkE6SesUynJ8Y/TISQk:IDM+GdozOWeLYR+EJPqYrz

Score
10/10

Malware Config

Extracted

Family

nworm

Version

v0.3.8

C2

publicvm.camdvr.org:1933

Mutex

9c719311

Targets

    • Target

      16c23beea2ed64892ae33e3214dcd22e

    • Size

      22KB

    • MD5

      16c23beea2ed64892ae33e3214dcd22e

    • SHA1

      dc3a74fb3723160a2b80fd7adb6cc006b84f3c04

    • SHA256

      0821ca98c306c5ac791e7fb80d81e5f8dc7d49f3bd88935561c1bc0d70821674

    • SHA512

      cda51458e2f038ed8e03af4dad324866428f439b086ba7d5bd6f843d6d0aa91fa5294ccde00d7bbd331c5242ffec5bdf8f5b17c0594bbe4bcd3e0378145ff8dd

    • SSDEEP

      384:I9azLT4M+GdozOWeLYRJkE6SesUynJ8Y/TISQk:IDM+GdozOWeLYR+EJPqYrz

    Score
    10/10
    • NWorm

      A TrickBot module used to propagate to vulnerable domain controllers.

MITRE ATT&CK Matrix

Tasks