General

  • Target

    168d85e0340b7f006e7a52988b7e01f9.zip

  • Size

    505KB

  • Sample

    240831-kwfz3awaja

  • MD5

    9ec62f4d85c529310402051b67d2e124

  • SHA1

    71a9256e037113fdc40138b43c14805401898084

  • SHA256

    81bc19c032e1c6261935a98ec420a760afe61dcf9a34d3d601d50679fa540076

  • SHA512

    48503fa8beafa9e396bcb4fe8a77092cbf673db950a70c1d4530d2b0fce21883522b7c7089a47ea8f3a271bcd20c32747475eb60fc32a696e41d036fce435357

  • SSDEEP

    6144:Z9bhuybkUdXB3mOMJbw7C1BUVN4vPR9zwT/glFERKONcxi37qrHpd9xT/hs5kuwr:ZtI4j3LMv1BHm0wlGxWW99s5kz0r00Pq

Malware Config

Extracted

Family

nullmixer

C2

http://mooorni.xyz/

Targets

    • Target

      f374c603980975a3be97f8308ef4a199c1062fb38001ae3b2cb0f52bbb621935

    • Size

      2.1MB

    • MD5

      168d85e0340b7f006e7a52988b7e01f9

    • SHA1

      d3c14c3449befbc23dccf256b41fc2df73fb2792

    • SHA256

      f374c603980975a3be97f8308ef4a199c1062fb38001ae3b2cb0f52bbb621935

    • SHA512

      32b9f17787f2b6d24324631095a62e710a7b7729af5af43b1474b8666a5b74ed67f0ea2af2d168993fb2e9fe8a50183f4213f7168cc510070effc7a89ff737fe

    • SSDEEP

      24576:oyS+zIYnYbYKHcJsGfinWdQN1O673ZCMafl3juQ55313N:oyPtINAe+fl3F

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

MITRE ATT&CK Enterprise v15

Tasks