Overview

overview

10

Static

static

1

npp.8.6.3....ad.exe

windows10-2004-x64

10

Resubmissions

26/02/2024, 07:27

240226-jabb1sge2s10

23/02/2024, 05:04

240223-fqsdpabe3z6

Sharing

Copy URL Twitter E-mail

General

  • Target
    4552e84edd73799b3a6e8e6d8ad0cb231d44241748ecb072c82ee9211728236c.zip
  • Size 8.5MB
  • Sample240226-jabb1sge2s
  • SHA256 4552e84edd73799b3a6e8e6d8ad0cb231d44241748ecb072c82ee9211728236c
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
wikiloaderbackdoorloader

Malware Config

Extracted

Family

  • wikiloader

C2

  • https://carritosdelacompra.com/wp-content/themes/twentytwentytwo/nnzknr.php?id=1

  • https://propertystats.net/wp-content/themes/twentytwentythree/hyhnv3.php?id=1

  • https://www.erasnetwork.eu/wp-content/themes/twentytwentyfour/dqyzqp.php?id=1

  • https://www.marioagozzino.it/wp-content/themes/twentytwentyfour/c2hitq.php?id=1

Targets

    • Target
      npp.8.6.3.portable.x64/notepad.exe
    • Size 6.9MB
    • SHA256 4e271372528a9b439d99a7376fc1ac9c67884226a2f7bcbe2f68694c80548287
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    wikiloaderbackdoorloader

    • Wikiloader

      Wikiloader is a loader and backdoor written in C++.

      loaderbackdoorwikiloader

    • Suspicious use of NtCreateThreadExHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks