General

  • Target

    95411f4e1cbd47057a55f5c389306c3b.zip

  • Size

    505KB

  • Sample

    240901-cmw1xsygjd

  • MD5

    a8dabba99e9fb31a58efd5a8666c3cfd

  • SHA1

    ac992433d546e8a37c9e52639cd94840a669509d

  • SHA256

    7c76456c13f188f08a29b77c9806c33bbfcb2bd8102c5951e83fcf9b0c1ef886

  • SHA512

    df9c70776a3c1247e2048b1f008fbf9adf75a306a90bd9701d974b22e686924c5f51da962b5130878539960f1518f8d278e188b25a584b9cf6614fd52ead616c

  • SSDEEP

    6144:FI0ERk4zAzpe4j3+02T0PjCcvw1TRA8ozj5FEvMnyiQZZLrHmZN80SC8ZTt66Dvi:3ERkD44r+0vbTvuRnw5uzDPL28bTNOXJ

Malware Config

Extracted

Family

nullmixer

C2

http://wensela.xyz/

Targets

    • Target

      0337de28411eeb2ed992a2c364ae34bca947f2e57ffcf9c37148e6e633179dce

    • Size

      2.1MB

    • MD5

      95411f4e1cbd47057a55f5c389306c3b

    • SHA1

      ac45ec10ad773929a8095ce4c0a1b11713cabdb0

    • SHA256

      0337de28411eeb2ed992a2c364ae34bca947f2e57ffcf9c37148e6e633179dce

    • SHA512

      ca46577b12827f73f1c45af92f743f8df24cad8bdddfa8338fd3f4ad1e56c0758df3988d36e0d0cf30ed67d250dfe6bf42a92c2b742687b567523011500c1b78

    • SSDEEP

      24576:kyS+D9YnYT56X/JE+fiHmz2N1O68HZys6fl3juQ55313N:kyfjnNAV+fl3F

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

MITRE ATT&CK Enterprise v15

Tasks