Overview

overview

10

Static

static

10

075381126c...7N.exe

windows7-x64

10

075381126c...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    075381126c57e7474ae8c15ed6aaac7bc6f159ce12696a56c474df5ddc596277N

  • Size

    36KB

  • Sample

    241001-esslsstgrb

  • MD5

    f7e22f0494c3dbb27fe5bacbb0ae2c90

  • SHA1

    fb25b3d76462bbb62d9429dc9bb4e5c85db00ffe

  • SHA256

    075381126c57e7474ae8c15ed6aaac7bc6f159ce12696a56c474df5ddc596277

  • SHA512

    322a1ee7634579103dfaf1d106900abcd47570784b93ead0787630659ba7460f7e95798ebcb254c19639c0beb0b131fb0d8ca7f549697e18bef9dee24a89fd08

  • SSDEEP

    384:PWyTPcNLdwHyYgdi9NaJhuB/l/FkBgmVZ6X:+aPc5BdiEIFYKmV

Score
10/10
andromedabackdoorbotnetdiscovery

Malware Config

Targets

    • Target

      075381126c57e7474ae8c15ed6aaac7bc6f159ce12696a56c474df5ddc596277N

    • Size

      36KB

    • MD5

      f7e22f0494c3dbb27fe5bacbb0ae2c90

    • SHA1

      fb25b3d76462bbb62d9429dc9bb4e5c85db00ffe

    • SHA256

      075381126c57e7474ae8c15ed6aaac7bc6f159ce12696a56c474df5ddc596277

    • SHA512

      322a1ee7634579103dfaf1d106900abcd47570784b93ead0787630659ba7460f7e95798ebcb254c19639c0beb0b131fb0d8ca7f549697e18bef9dee24a89fd08

    • SSDEEP

      384:PWyTPcNLdwHyYgdi9NaJhuB/l/FkBgmVZ6X:+aPc5BdiEIFYKmV

    Score
    10/10
    andromedabackdoorbotnetdiscovery

    • Andromeda, Gamarue

      Andromeda, also known as Gamarue, is a modular botnet malware primarily used for distributing other types of malware and it's written in C++.

      botnetbackdoorandromeda

    • Detects Andromeda payload.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks