General

  • Target

    852afcbc36715af8d5fbb97df01829e0b13f2e15946f62b8a335f7c73ca03fd4N

  • Size

    6.6MB

  • Sample

    241021-rh5jtsydpk

  • MD5

    e8d385ec1196172c5bd744e18ba1f9a0

  • SHA1

    4c9ba131150152ba784b8bc4c5da47b6a2aebfa7

  • SHA256

    852afcbc36715af8d5fbb97df01829e0b13f2e15946f62b8a335f7c73ca03fd4

  • SHA512

    ab56d0489f1164036c33cd314cd13d7ba9f18d48c85e8e1923d4b874410665ae4d9a68692d80abbc92b2a748ec361535743067992f6fbd893b0be14d6c6c9adf

  • SSDEEP

    49152:ImcKNb17bBQxC/wTW2owTh8fpSKcblGg9wN6GEbJcKDRMEsavpfbOV0Mt7JCsRMu:I4bdFYCITWvf4f9wQUlwpfbcmZhmihWj

Malware Config

Extracted

Family

nullmixer

C2

http://marisana.xyz/

Targets

    • Target

      852afcbc36715af8d5fbb97df01829e0b13f2e15946f62b8a335f7c73ca03fd4N

    • Size

      6.6MB

    • MD5

      e8d385ec1196172c5bd744e18ba1f9a0

    • SHA1

      4c9ba131150152ba784b8bc4c5da47b6a2aebfa7

    • SHA256

      852afcbc36715af8d5fbb97df01829e0b13f2e15946f62b8a335f7c73ca03fd4

    • SHA512

      ab56d0489f1164036c33cd314cd13d7ba9f18d48c85e8e1923d4b874410665ae4d9a68692d80abbc92b2a748ec361535743067992f6fbd893b0be14d6c6c9adf

    • SSDEEP

      49152:ImcKNb17bBQxC/wTW2owTh8fpSKcblGg9wN6GEbJcKDRMEsavpfbOV0Mt7JCsRMu:I4bdFYCITWvf4f9wQUlwpfbcmZhmihWj

    • NullMixer

      NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

MITRE ATT&CK Enterprise v15

Tasks