001142778ad86798294c311a2e5d870a0606fe39a4e5474ef7fe47f37e90a27f | Triage

Resubmissions

14/10/2024, 20:34 UTC

241014-zcvfnsygrr 6

14/10/2024, 18:30 UTC

241014-w5sk1azcmh 6

14/10/2024, 15:58 UTC

241014-tewtmaxcjp 6

14/10/2024, 14:34 UTC

241014-rxwkgatfrn 6

14/10/2024, 14:26 UTC

241014-rr7esatejq 6

14/10/2024, 13:27 UTC

241014-qp5bzasajl 6

14/10/2024, 13:17 UTC

241014-qjty2sxbra 6

14/10/2024, 13:00 UTC

241014-p8z1xswfqd 6

14/10/2024, 12:16 UTC

241014-pfqa1svdna 6

14/10/2024, 12:11 UTC

241014-pck7wsvdjc 6

Sharing

General

Target

Uthnarak, Nercrotic master.json
Size

56KB
Sample

241014-zcvfnsygrr
MD5

9e309898a7fcbd956e7abe34d640e839
SHA1

2078318c5a6bae82c40a9c605433df578527debb
SHA256

001142778ad86798294c311a2e5d870a0606fe39a4e5474ef7fe47f37e90a27f
SHA512

085334f98013047b320bf253c0d291c543723b8bd85272e4474e8ffefef549bb3b9740233b4f4617d43c3a7017583d3021ff4dd4bf8b1fbd84471a1d6cd147bb
SSDEEP

1536:lfjoYIGqY6og/IaNa94he47GK9qQHwHdqFPv9ot:loXnsgRNa94he47GK9vw94Pvat

Score

6^/10

Malware Config

Targets

- Target
  
  Uthnarak, Nercrotic master.json
- Size
  
  56KB
- MD5
  
  9e309898a7fcbd956e7abe34d640e839
- SHA1
  
  2078318c5a6bae82c40a9c605433df578527debb
- SHA256
  
  001142778ad86798294c311a2e5d870a0606fe39a4e5474ef7fe47f37e90a27f
- SHA512
  
  085334f98013047b320bf253c0d291c543723b8bd85272e4474e8ffefef549bb3b9740233b4f4617d43c3a7017583d3021ff4dd4bf8b1fbd84471a1d6cd147bb
- SSDEEP
  
  1536:lfjoYIGqY6og/IaNa94he47GK9qQHwHdqFPv9ot:loXnsgRNa94he47GK9vw94Pvat
Score

6^/10
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2