Overview

overview

10

Static

static

3

ec602e5151...88.exe

windows7-x64

10

ec602e5151...88.exe

windows10-2004-x64

10

setup_installer.exe

windows7-x64

10

setup_installer.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    ec602e5151e622f2f47d79575dc42aacf84681c7f4f901b146a5edb85507f788
  • Size 4.3MB
  • Sample240410-r5raqabf84
  • SHA256 ec602e5151e622f2f47d79575dc42aacf84681c7f4f901b146a5edb85507f788
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
nullmixeraspackv2dropper

Malware Config

Extracted

Family

  • nullmixer

C2

  • http://estrix.xyz/

Targets

    • Target
      ec602e5151e622f2f47d79575dc42aacf84681c7f4f901b146a5edb85507f788
    • Size 4.3MB
    • SHA256 ec602e5151e622f2f47d79575dc42aacf84681c7f4f901b146a5edb85507f788
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    nullmixeraspackv2dropper

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

      droppernullmixer

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2
    • Target
      setup_installer.exe
    • Size 4.3MB
    • SHA256 6a9a3047c827fcd99d8a97668337ca2d7af78b3b634e73e2461e8429e264c7e2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    nullmixeraspackv2dropper

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

      droppernullmixer

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks