General

  • Target

    UntitledNuker-master.zip

  • Size

    9.8MB

  • Sample

    240528-v6ly6sef83

  • MD5

    b5cf98394b832a51923e7a336235e0cd

  • SHA1

    87ae3aa129f5babd36126b65a9445c32e9d17b23

  • SHA256

    ec57db3a01842d649a50f90eff632dd05edde36d0fe72b2d4177e1e67ca3b479

  • SHA512

    816875cb4486339199cc762a4507e5b5c920f2e360fdc4a2a22debd308e143ab5bca2eaf76c8e6f2dd9d8370afad9e114865ccfb36174855148fb0c7820fea67

  • SSDEEP

    196608:isCgiwLusgLEVbUFiECF40v6aut8pzTRySIo/FekGTiKG:NdiwLuKvE4yteTYSIDDG

Score
7/10

Malware Config

Targets

    • Target

      UntitledNuker-master/UntitledNuker.exe

    • Size

      10.1MB

    • MD5

      84d6d7beaac298809d90f86cf799a65d

    • SHA1

      6f29241c1084a67ce86a4458fad5dace7c9692f5

    • SHA256

      4c66b5e30ee9328391e1354457d68d922f04570409a7c5571e9be3b5c3aa86e5

    • SHA512

      8cabfe053c858ab6600296deaae21d0e2f9815c60e26a40390736bea438dfb84f4748b43375aba9abc4b6cd227bb3f43aca116da012647ddf5b57174b12ceb8a

    • SSDEEP

      196608:hhnoR+dQmR5dA6lDuErSEEJwdF4OVUqk/IpjDFc2YXFNksYv+C:PnO+dQ2lD+9JOq/OD226Ox

    Score
    7/10
    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Target

      UntitledNuker-master/src/UntitledNuker.py

    • Size

      21KB

    • MD5

      de5043cfbbfa73015e277e1b141e9088

    • SHA1

      f19481f09dd9f82fd4d70de52313cbd87e5a1dce

    • SHA256

      e7bcf41e37c6919b180cf9372e850ceb3bb2fd14a23f757e802148a60e5dd937

    • SHA512

      9ffa8ca75bf6b5c9cc850a219e68ac1474466bbeb890b1ff522f44407df9606add44b06f5c56aa4b70b78b2023144a8fabf67818fe469147c0b54ec3e7dcb459

    • SSDEEP

      192:0x9tq/z2FmB5b+bf8pmRIlrUkPIa5mco8B/BCpoxlgfxM+jncSxU4AsSQa/gQYjt:0rY+b3JkPIJO8TiXk

    Score
    3/10

MITRE ATT&CK Matrix ATT&CK v13

Discovery

System Information Discovery

1
T1082

Command and Control

Web Service

1
T1102

Tasks