Analysis
-
max time kernel
132s -
max time network
118s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
24-05-2024 18:55
Static task
static1
1 signatures
General
-
Target
fluophosphateYPg6.exe
-
Size
181KB
-
MD5
e79d5eec299dc403f0211ee6bcf67b9d
-
SHA1
e88b7410f2953090e517fd334742d0fd3ee8cfbb
-
SHA256
04e8a7ccb0100d6c32b549ec7b5da21bc79f2e10404d095debd3587ac1b11159
-
SHA512
9b2fdfa48f949f60c13a208cb526a99775a9909b6f3a78c05e85794511da4629934d8b9f9cb0f06f17f2fed61088538681a59fd9fa9b07339893b8f70baa6057
-
SSDEEP
3072:3CmlA+2TGMF85+bkRG32foUP9GmPe97UoHMxyKK0MlwRvhMzsarTzwD1cS4u0+gY:SmlV4h8JG3QUzB9ly6trT6R4p4NZ
Malware Config
Extracted
Family
koiloader
C2
http://79.124.78.45/hockamore.php
Attributes
-
payload_url
https://rdccob.com.br/wp-content/uploads/2021
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3224-0-0x0000000002F40000-0x0000000002F4D000-memory.dmpFilesize
52KB