General
-
Target
nimwhispers.exe
-
Size
262KB
-
Sample
240915-xcbbpaxgpm
-
MD5
22db6458c458b402831e8b74621e8a1d
-
SHA1
d4f1438bc1d39eef7fe39bd9ee5e21e988930b1f
-
SHA256
580809c7c05f1630c637690c41db2ddea7feb0e230bf92f51deebaa495b46736
-
SHA512
7291d1c9d25ae6ef0372dbec1e07fb742acc8e3ce0798161915c5bbe21c163684f02a7f070cde74b0e6d8fa63f99a6e1ab212e9dd8383f9f8080d2d487340c03
-
SSDEEP
6144:IIn0gFc1UIE1gt395GTe83dMNJJJ655ZZo9W+Kki:IIn0Ac1UIE1gt3Kv3p+K1
Behavioral task
behavioral1
Sample
nimwhispers.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
nimwhispers.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
cobaltstrike
http://state-mgmt.us:443/amJE
-
user_agent
User-Agent: Microsoft-CryptoAPI/6.1
Targets
-
-
Target
nimwhispers.exe
-
Size
262KB
-
MD5
22db6458c458b402831e8b74621e8a1d
-
SHA1
d4f1438bc1d39eef7fe39bd9ee5e21e988930b1f
-
SHA256
580809c7c05f1630c637690c41db2ddea7feb0e230bf92f51deebaa495b46736
-
SHA512
7291d1c9d25ae6ef0372dbec1e07fb742acc8e3ce0798161915c5bbe21c163684f02a7f070cde74b0e6d8fa63f99a6e1ab212e9dd8383f9f8080d2d487340c03
-
SSDEEP
6144:IIn0gFc1UIE1gt395GTe83dMNJJJ655ZZo9W+Kki:IIn0Ac1UIE1gt3Kv3p+K1
Score10/10 -