Overview

overview

10

Static

static

1

npp.8.6.4....ad.exe

windows10-2004-x64

10

Resubmissions

05/04/2024, 01:39

240405-b2374sgf9z

27/03/2024, 09:17

240327-k82gjacb8v10

27/03/2024, 02:33

240327-c2b93aag246

Sharing

Copy URL Twitter E-mail

General

  • Target
    9af7cff793aa9a53b890331046d268e3627bb2a6b5613cdb49619c07412ccc03.zip
  • Size 8.2MB
  • Sample240327-k82gjacb8v
  • SHA256 9af7cff793aa9a53b890331046d268e3627bb2a6b5613cdb49619c07412ccc03
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
wikiloaderbackdoorloader

Malware Config

Extracted

Family

  • wikiloader

C2

  • https://www.alabamacarhorns.com/wp-content/themes/twentytwentyfour/34uo7s.php?id=1

  • https://13300.org/wp-content/themes/twentytwentythree/t51kkf.php?id=1

  • https://alternativetracks.com/wp-content/themes/twentytwentyfour/c9wfar.php?id=1

  • https://www.amysinger.com/wp-content/themes/twentyten/b9un4f.php?id=1

Targets

    • Target
      npp.8.6.4.portable.x64/notepad.exe
    • Size 6.9MB
    • SHA256 712abdd019cd2e4d96cee74d94eafba8f21ffc35c99a656c228a179ba6f5b310
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    wikiloaderbackdoorloader

    • Wikiloader

      Wikiloader is a loader and backdoor written in C++.

      loaderbackdoorwikiloader

    • Suspicious use of NtCreateThreadExHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks