warmcookie | ccde1ded028948f5cd3277d2d4af6b22fa33f53abde84ea2aa01f1872fad1d13 | Triage

Resubmissions

28/10/2024, 17:20

241028-vwegcathpa 10

20/06/2024, 04:07

240620-epwt2sxhkc 8

20/06/2024, 03:56

240620-ehtfcaxemb 3

14/06/2024, 11:45

240614-nw7dssyhre 8

26/05/2024, 08:12

240526-j36nmada24 8

Sharing

Copy URL Twitter E-mail

General

Target

ccde1ded028948f5cd3277d2d4af6b22fa33f53abde84ea2aa01f1872fad1d13.exe
Size

141KB
Sample

241028-vwegcathpa
MD5

1b7b6fb1a99996587a3c20ee9c390a9c
SHA1

129aa22329dd45f7bce5172e97cbd8016dec830e
SHA256

ccde1ded028948f5cd3277d2d4af6b22fa33f53abde84ea2aa01f1872fad1d13
SHA512

a3b62e1c1184c01b0175b09f0a62003e120e652245ea80cebf9e55c89ef71308c4400bfe13281a60ae993c58d7dad5522688fa2e8924343e1baa5c25bfce44eb
SSDEEP

3072:HACxLpcTIhjZM3VhHSkYl8CagwurZvE9vV1ZQZR:HTtpcPlJSTl4PuF

Score

10^/10

warmcookie backdoor

Malware Config

Extracted

Family

warmcookie

C2

185.49.69.41

Attributes

mutex
08f09347-2b1b-491e-84f5-2768e33a0c04
user_agent
Mozilla / 4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;.NET CLR 1.0.3705)

Targets

- Target
  
  ccde1ded028948f5cd3277d2d4af6b22fa33f53abde84ea2aa01f1872fad1d13.exe
- Size
  
  141KB
- MD5
  
  1b7b6fb1a99996587a3c20ee9c390a9c
- SHA1
  
  129aa22329dd45f7bce5172e97cbd8016dec830e
- SHA256
  
  ccde1ded028948f5cd3277d2d4af6b22fa33f53abde84ea2aa01f1872fad1d13
- SHA512
  
  a3b62e1c1184c01b0175b09f0a62003e120e652245ea80cebf9e55c89ef71308c4400bfe13281a60ae993c58d7dad5522688fa2e8924343e1baa5c25bfce44eb
- SSDEEP
  
  3072:HACxLpcTIhjZM3VhHSkYl8CagwurZvE9vV1ZQZR:HTtpcPlJSTl4PuF
Score

4^/10
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

backdoorwarmcookie

behavioral1