Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    21-11-2024 00:22

General

  • Target

    e3cac0187e7c388471ddca3f67ae661223dd20a7c8fbcd1990fe0b0ee44b7593.exe

  • Size

    2.1MB

  • MD5

    2ee723971682ff0a22fde3b401f2fc36

  • SHA1

    8884377af6754ee6f6a94d449f23d6bd00c8a92f

  • SHA256

    e3cac0187e7c388471ddca3f67ae661223dd20a7c8fbcd1990fe0b0ee44b7593

  • SHA512

    c7950067a4fa5ea4972511df6cf1a749ce8e56d427af78e15ccc53694c21570d225dc79b9d91816818a7520ca00cc88275da1763513ce3630ba252c95fb94338

  • SSDEEP

    24576:p0rQYlYFGDoAMmRji9hInsamBl3juQ55313P:p0jPsamBl33

Score
10/10

Malware Config

Extracted

Family

nullmixer

C2

http://gazrxlog.xyz/

Signatures

  • NullMixer

    NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

  • Nullmixer family

Processes

  • C:\Users\Admin\AppData\Local\Temp\e3cac0187e7c388471ddca3f67ae661223dd20a7c8fbcd1990fe0b0ee44b7593.exe
    "C:\Users\Admin\AppData\Local\Temp\e3cac0187e7c388471ddca3f67ae661223dd20a7c8fbcd1990fe0b0ee44b7593.exe"
    1⤵
      PID:2452

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2452-0-0x0000000000400000-0x000000000051B000-memory.dmp

      Filesize

      1.1MB