General

  • Target

    793d31d560aacb0bc61302477361b688

  • Size

    7.1MB

  • Sample

    240127-erd21schf4

  • MD5

    793d31d560aacb0bc61302477361b688

  • SHA1

    b9a5b0f7e9f0ce8eeac1ad87aa3027f107b6c37b

  • SHA256

    4c096c8a5fa81aa478c91f84eff7d333594bca3dd017f70610fe264cd4b00364

  • SHA512

    e6a4ad4fc667b3dff44efdc080b925207c351dfeec7e2c8fe990f492ff529fd025422425205ff4a2f928d8c525b7bbfc2c00af268777ff1fafa7a74c0fcbe265

  • SSDEEP

    98304:ZkynTtQF2dFYCITWvf4f9wQ8IfbcmZ4lEZ:ZJna8wpf/8+Uc

Malware Config

Extracted

Family

nullmixer

C2

http://marisana.xyz/

Targets

    • Target

      793d31d560aacb0bc61302477361b688

    • Size

      7.1MB

    • MD5

      793d31d560aacb0bc61302477361b688

    • SHA1

      b9a5b0f7e9f0ce8eeac1ad87aa3027f107b6c37b

    • SHA256

      4c096c8a5fa81aa478c91f84eff7d333594bca3dd017f70610fe264cd4b00364

    • SHA512

      e6a4ad4fc667b3dff44efdc080b925207c351dfeec7e2c8fe990f492ff529fd025422425205ff4a2f928d8c525b7bbfc2c00af268777ff1fafa7a74c0fcbe265

    • SSDEEP

      98304:ZkynTtQF2dFYCITWvf4f9wQ8IfbcmZ4lEZ:ZJna8wpf/8+Uc

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

MITRE ATT&CK Matrix

Tasks