Overview

overview

10

Static

static

10

df058309d1...18.ps1

windows7-x64

3

df058309d1...18.ps1

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df058309d13c72e968fd2d3b93f9886e_JaffaCakes118

  • Size

    45KB

  • Sample

    240913-2g2rnatckh

  • MD5

    df058309d13c72e968fd2d3b93f9886e

  • SHA1

    52cc14d2c2d1fb7ebb30edbae8fb5297713f330b

  • SHA256

    4f503f1368c34f047e2a402052d53a8f275309f416f0f4e6eb3b6340d54af946

  • SHA512

    c8f14d198e33a27608ee0b4fe03e2386a43bf9a2fd772f7078479eb49226dd2f21922bd3fea9e76d837167ec94b693d0eaa6030aca7fd9ea2ba18b0b4a677fcf

  • SSDEEP

    384:OqsPIo1MvgYmAKz6b6u/Ohx22qSoYDBHUaz+dObbMtQJsyhZVERpcZxMyh01bHcz:SPugYmpcSQ25HUJDpFR6cVT/8llz

Score
10/10
nwormexecution

Malware Config

Extracted

Family

nworm

Version

v0.3.8

C2

gamerspro.duckdns.org:1234

95.211.134.248:1234
Mutex

22f7c3ca

Targets

    • Target

      df058309d13c72e968fd2d3b93f9886e_JaffaCakes118

    • Size

      45KB

    • MD5

      df058309d13c72e968fd2d3b93f9886e

    • SHA1

      52cc14d2c2d1fb7ebb30edbae8fb5297713f330b

    • SHA256

      4f503f1368c34f047e2a402052d53a8f275309f416f0f4e6eb3b6340d54af946

    • SHA512

      c8f14d198e33a27608ee0b4fe03e2386a43bf9a2fd772f7078479eb49226dd2f21922bd3fea9e76d837167ec94b693d0eaa6030aca7fd9ea2ba18b0b4a677fcf

    • SSDEEP

      384:OqsPIo1MvgYmAKz6b6u/Ohx22qSoYDBHUaz+dObbMtQJsyhZVERpcZxMyh01bHcz:SPugYmpcSQ25HUJDpFR6cVT/8llz

    Score
    3/10
    execution
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks