General

  • Target

    af6333ee4de8a1d1b1170a9725c25894

  • Size

    3.9MB

  • Sample

    240229-y5966abh69

  • MD5

    af6333ee4de8a1d1b1170a9725c25894

  • SHA1

    99b7bac2577ff3a0a7fc81a57c1dc768c7e25d1f

  • SHA256

    52ab28c53db2fbee87a14124b0499f620d3ce430870eb6b604be04ccc380dc2c

  • SHA512

    2cf23bb190504f29be8d7be822dfb2bf23928fd1f3d2311e0aace7c0ef79f944e1a8e36c2e60a18ff0ee24acd59e3ea5686d000842ad4a718d20a9a7bacfc761

  • SSDEEP

    49152:4tYAg5RB77DVRDecpl876oK3E0bpyKKEBRT/bl3k:41OFDVRDHcYUjEn2

Malware Config

Extracted

Family

nullmixer

C2

http://watira.xyz/

Targets

    • Target

      af6333ee4de8a1d1b1170a9725c25894

    • Size

      3.9MB

    • MD5

      af6333ee4de8a1d1b1170a9725c25894

    • SHA1

      99b7bac2577ff3a0a7fc81a57c1dc768c7e25d1f

    • SHA256

      52ab28c53db2fbee87a14124b0499f620d3ce430870eb6b604be04ccc380dc2c

    • SHA512

      2cf23bb190504f29be8d7be822dfb2bf23928fd1f3d2311e0aace7c0ef79f944e1a8e36c2e60a18ff0ee24acd59e3ea5686d000842ad4a718d20a9a7bacfc761

    • SSDEEP

      49152:4tYAg5RB77DVRDecpl876oK3E0bpyKKEBRT/bl3k:41OFDVRDHcYUjEn2

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

MITRE ATT&CK Matrix

Tasks