Overview

overview

6

Static

static

3

NinjaTrader.exe

windows7-x64

NinjaTrader.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NinjaTrader.exe

  • Size

    498KB

  • Sample

    240219-t11dyagb41

  • MD5

    428ab5e478bbdc7e4d86096ae242fd6a

  • SHA1

    2b4cdb6ba05010db0004a82a302acd38805ee671

  • SHA256

    4b5c8c4c2ac56489abb25e1fea7dc6de2b17164c179d6f8a4159fe52462224f0

  • SHA512

    db05feda7e3de416355c3c27db3f46e5e67611555717cac4c4afb1a2005b46df0a1b91f30116f28c2779b49f2691fa4d37c486d15e5ca17bbfa570026b2480b9

  • SSDEEP

    12288:esdqaOs8VZ2ygYJUYP8FIeQsjrK023TE05l:xdqNsYBUYkFIkvA3nl

Score
6/10

Malware Config

Targets

    • Target

      NinjaTrader.exe

    • Size

      498KB

    • MD5

      428ab5e478bbdc7e4d86096ae242fd6a

    • SHA1

      2b4cdb6ba05010db0004a82a302acd38805ee671

    • SHA256

      4b5c8c4c2ac56489abb25e1fea7dc6de2b17164c179d6f8a4159fe52462224f0

    • SHA512

      db05feda7e3de416355c3c27db3f46e5e67611555717cac4c4afb1a2005b46df0a1b91f30116f28c2779b49f2691fa4d37c486d15e5ca17bbfa570026b2480b9

    • SSDEEP

      12288:esdqaOs8VZ2ygYJUYP8FIeQsjrK023TE05l:xdqNsYBUYkFIkvA3nl

    Score
    6/10

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks