General

  • Target

    a002887520541f37f1b182856dd6ab7d

  • Size

    4.2MB

  • Sample

    240216-k9velsfg59

  • MD5

    a002887520541f37f1b182856dd6ab7d

  • SHA1

    e352c82608132fd5c09a3b33cb3386d06bc702a0

  • SHA256

    b5f59efe6b0a0f207940166d338da8c9cc701b90680fda614f4d83aba011c6b8

  • SHA512

    4a8d2a0010a7b8b74662227ed679aab5bca07d6fbf47895408d010d45e20fa04d1cee1d41d53179a694750a7988356fb26dd3a92279d4533756dbba80126871e

  • SSDEEP

    49152:3Zmygd5Wp5rJRxCkUP876oK3j03M6jLEl3k:3uzgtJTCklYMf

Malware Config

Extracted

Family

nullmixer

C2

http://marisana.xyz/

Targets

    • Target

      a002887520541f37f1b182856dd6ab7d

    • Size

      4.2MB

    • MD5

      a002887520541f37f1b182856dd6ab7d

    • SHA1

      e352c82608132fd5c09a3b33cb3386d06bc702a0

    • SHA256

      b5f59efe6b0a0f207940166d338da8c9cc701b90680fda614f4d83aba011c6b8

    • SHA512

      4a8d2a0010a7b8b74662227ed679aab5bca07d6fbf47895408d010d45e20fa04d1cee1d41d53179a694750a7988356fb26dd3a92279d4533756dbba80126871e

    • SSDEEP

      49152:3Zmygd5Wp5rJRxCkUP876oK3j03M6jLEl3k:3uzgtJTCklYMf

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

MITRE ATT&CK Matrix

Tasks