Overview

overview

10

Static

static

10

HTTP-RAND.js

windows10-2004-x64

3

HTTP-RAW.js

windows10-2004-x64

3

HTTP-SOCKET.js

windows10-2004-x64

3

Hulk.js

windows10-2004-x64

3

MINECRAFT-SLAM

windows10-2004-x64

1

OVERFLOW

windows10-2004-x64

1

cybersec m...ol.exe

windows10-2004-x64

10

destroy.pl

windows10-2004-x64

3

flux

windows10-2004-x64

1

god.pl

windows10-2004-x64

3

home.pl

windows10-2004-x64

3

http1.js

windows10-2004-x64

3

https-spoof.py

windows10-2004-x64

3

hyper.js

windows10-2004-x64

3

ldap

windows10-2004-x64

1

nfo-killer

windows10-2004-x64

1

ntp

windows10-2004-x64

1

Analysis

  • max time kernel
    148s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-11-2024 08:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    nfo-killer

  • Size

    30KB

  • MD5

    02acade11646847c25bf429c4a45756c

  • SHA1

    e8eda1a866b1b8dfc50f37b600b2773bd6a3985b

  • SHA256

    938d36088995efc47174dd87114ef307c9f04781f6caca4a025b1fa6eaac0c73

  • SHA512

    abdef70c6e4dd14e4f180e21303124599928eb74b31f47d9c5e2230b1652d0ba33b8d5940e0677e61c22033b2c8fa42779f0971182bbf474b85fe2115768e4bb

  • SSDEEP

    768:AFTaLRRn+oEnfXPH/3vnfXPH/3vqiaSKZ3PsrBm:GTqRR+gym

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\nfo-killer
    1⤵
      PID:4480

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads