General

  • Target

    cfa223e13a801c92823acfdc0acc5783

  • Size

    9.5MB

  • Sample

    240317-cdpv9abg22

  • MD5

    cfa223e13a801c92823acfdc0acc5783

  • SHA1

    66ef740e2f027c55c9d4cc24829d0e70f79718b2

  • SHA256

    c85cc97449361d27ee643b0c5cdc64071a78884cb7066bdc915e7a2cc11fc44c

  • SHA512

    0c89f78b5b49371d0a3ec8d4b61e3268dd1a2bc2045777794d7b260341271f3c85677e45f4b4840091c39e05e979a6aeb60c2a4b7a8bbaeca03aedcf6d57d57f

  • SSDEEP

    98304:1XHjTo82PJHx+xVXAL4IqPzTcKAOb5KLYMX9DsTAAHVT8r5dFYCITWvf/Uu:1otUHXAW7m25KLYMX9oTAcTgw2

Malware Config

Extracted

Family

nullmixer

C2

http://marisana.xyz/

Targets

    • Target

      cfa223e13a801c92823acfdc0acc5783

    • Size

      9.5MB

    • MD5

      cfa223e13a801c92823acfdc0acc5783

    • SHA1

      66ef740e2f027c55c9d4cc24829d0e70f79718b2

    • SHA256

      c85cc97449361d27ee643b0c5cdc64071a78884cb7066bdc915e7a2cc11fc44c

    • SHA512

      0c89f78b5b49371d0a3ec8d4b61e3268dd1a2bc2045777794d7b260341271f3c85677e45f4b4840091c39e05e979a6aeb60c2a4b7a8bbaeca03aedcf6d57d57f

    • SSDEEP

      98304:1XHjTo82PJHx+xVXAL4IqPzTcKAOb5KLYMX9DsTAAHVT8r5dFYCITWvf/Uu:1otUHXAW7m25KLYMX9oTAcTgw2

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

MITRE ATT&CK Matrix

Tasks