General

  • Target

    6ba0959d132b0d9a0ec42d98e2fdff12.zip

  • Size

    505KB

  • Sample

    240903-w1n21sshqr

  • MD5

    0470cd9f87810ad36df830b63cd99712

  • SHA1

    1d0f17ed17164d572ba319c5f8527307a3b7999b

  • SHA256

    a509b84f2b872d49fbe6f7e937ef8dfad0adf2427b0db3b38c68a9d583b9c500

  • SHA512

    215fc167691281474d1cf17dc6435ddf64cbcffe6540f94ce9e093dfa6ed17132d6e053f82d44d342820a5aae5d6037b6c43dc507ac2b934baf6c259d980a85c

  • SSDEEP

    12288:eJVfklG7MqXYaJohiabFg7+dnvrGxbftnv/P:0kSVJtaby746Xnv/P

Malware Config

Extracted

Family

nullmixer

C2

http://wensela.xyz/

Targets

    • Target

      a78ac07f07e3d4213f39e9f3f1b6aadc3e9891cfd344dc1882617bc5f527c021

    • Size

      2.1MB

    • MD5

      6ba0959d132b0d9a0ec42d98e2fdff12

    • SHA1

      971602c71e53079c6296df707fd48b003fc41abf

    • SHA256

      a78ac07f07e3d4213f39e9f3f1b6aadc3e9891cfd344dc1882617bc5f527c021

    • SHA512

      2be346dbb52abe404fd09114b3463b26064315e1365e0b964abd80ab4719dc93ef524ab2a48b9705b08722da16eb987029f9a453763f5c950a92ccb09a7267a4

    • SSDEEP

      24576:d2/k1EDYAYQCn8Whh1Ti9iFws8GOs5+Wbdw2xGl3juQ55313N:w/7iGeLddGl3F

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

MITRE ATT&CK Enterprise v15

Tasks