Overview

overview

10

Static

static

3

2024-06-11...ia.exe

windows7-x64

7

2024-06-11...ia.exe

windows10-2004-x64

10

Resubmissions

26-08-2024 18:22

240826-wz2aysybre 7

11-06-2024 07:56

240611-jspmcszfrp 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-11_a62a27859c134979a69e87cc0a27d14f_mafia

  • Size

    527KB

  • Sample

    240611-jspmcszfrp

  • MD5

    a62a27859c134979a69e87cc0a27d14f

  • SHA1

    8862e802c4105036bdcf88855fa701d865dd2b68

  • SHA256

    df749b13dcfb7caa1d09738207d08dbef5505fbd8a6834802244ba67e1479db5

  • SHA512

    ddba5b945b66459e48bb3f8c66ecc9c149499b75b5aeffcbbcf35ac19e763f9ebb7cf235e01ca071130178e3b947ec93af5b4450b529e01f68b96fa4016dacce

  • SSDEEP

    6144:yorf3lPvovsgZnqG2C7mOTeiLRDYTBzy9BXc6FTDaVImDH+Q+rrYvb+LIgMr5aBv:fU5rCOTeidim9W0PcI5AOMr5aGDZu

Score
10/10
anchordnsbackdoor

Malware Config

Targets

    • Target

      2024-06-11_a62a27859c134979a69e87cc0a27d14f_mafia

    • Size

      527KB

    • MD5

      a62a27859c134979a69e87cc0a27d14f

    • SHA1

      8862e802c4105036bdcf88855fa701d865dd2b68

    • SHA256

      df749b13dcfb7caa1d09738207d08dbef5505fbd8a6834802244ba67e1479db5

    • SHA512

      ddba5b945b66459e48bb3f8c66ecc9c149499b75b5aeffcbbcf35ac19e763f9ebb7cf235e01ca071130178e3b947ec93af5b4450b529e01f68b96fa4016dacce

    • SSDEEP

      6144:yorf3lPvovsgZnqG2C7mOTeiLRDYTBzy9BXc6FTDaVImDH+Q+rrYvb+LIgMr5aBv:fU5rCOTeidim9W0PcI5AOMr5aGDZu

    Score
    10/10
    anchordnsbackdoor

    • AnchorDNS Backdoor

      A backdoor which communicates with C2 through DNS, attributed to the creators of Trickbot and Bazar.

      backdooranchordns

    • Detected AnchorDNS Backdoor

      Sample triggered yara rules associated with the AnchorDNS malware family.

      backdoor

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks