General

  • Target

    7525911c675dc5535acb25266a6d5978

  • Size

    294KB

  • Sample

    241112-jbwpcaxgpp

  • MD5

    7525911c675dc5535acb25266a6d5978

  • SHA1

    ec773435325b35500a2488fa37840e7accc812f6

  • SHA256

    5e1fb620221f35bb1fdbf23c330382762bbdaeb9d911edffb102fc24320985ee

  • SHA512

    24b6245da7f9b1233ae0d0c99938f1abbdf0eb0da029dd58c3f722ca97a62633911667b8be69b10b36f753b5615ec2d621d239f0540460128106ad7346de28a9

  • SSDEEP

    6144:kIVqgD68lGrnLG7lxfgk/heqTWfP6KhhhWy6:Zqgm8lNjx/S/i

Malware Config

Extracted

Family

mylobot

C2

op17.ru:6006

eakalra.ru:1281

zgclgdb.ru:8518

hpifnad.ru:3721

lbjcwix.ru:8326

rykacfb.ru:8483

benkofx.ru:3333

fpzskbc.ru:9364

ouxtjzd.ru:8658

schwpxp.ru:2956

pspkgya.ru:2675

lmlwtdm.ru:2768

rzwnsph.ru:5898

awtiwzk.ru:9816

pzljenb.ru:3486

yhjtpyf.ru:3565

ogkbsoq.ru:2553

rjngcbj.ru:5655

jlfeopz.ru:4698

wqcruiz.ru:2165

Targets

    • Target

      7525911c675dc5535acb25266a6d5978

    • Size

      294KB

    • MD5

      7525911c675dc5535acb25266a6d5978

    • SHA1

      ec773435325b35500a2488fa37840e7accc812f6

    • SHA256

      5e1fb620221f35bb1fdbf23c330382762bbdaeb9d911edffb102fc24320985ee

    • SHA512

      24b6245da7f9b1233ae0d0c99938f1abbdf0eb0da029dd58c3f722ca97a62633911667b8be69b10b36f753b5615ec2d621d239f0540460128106ad7346de28a9

    • SSDEEP

      6144:kIVqgD68lGrnLG7lxfgk/heqTWfP6KhhhWy6:Zqgm8lNjx/S/i

    • Mylobot

      Botnet which first appeared in 2017 written in C++.

    • Mylobot family

    • Deletes itself

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks