Overview

overview

10

Static

static

10

Vixen Loader.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Vixen Loader.exe

  • Size

    202KB

  • Sample

    241215-f8fslsvqdz

  • MD5

    d5adb7cd51efbccc96d7528d5e1cdac9

  • SHA1

    56c3209c57c62dad0415bd8f8f4ef6a41ba2816f

  • SHA256

    bf83f08a4093e5eb31f3f7334f8e33ffc69a05b548433807952157a127dbd110

  • SHA512

    191537822e9847339a31861e29bf2a38c1b3dfe9fcb6d119f381cebd51f44d75e1733344fb4da8cbd893c9858472539b267711ce52217ece8897d6b4354861d6

  • SSDEEP

    6144:gLV6Bta6dtJmakIM57bQv4tlS6o8OKUUBupOin:gLV6BtpmkXAU8OKlBupOin

Score
10/10
nanocorediscoveryevasionkeyloggerpersistencespywarestealertrojan

Malware Config

Extracted

Family

nanocore

Version

1.2.2.0

C2

military-containers.gl.at.ply.gg:52683

127.0.0.1:52683
Mutex

0ee1deb9-31cf-4fc1-8da9-88b87cb27fb7

Attributes
  • activate_away_mode

    true

  • backup_connection_host

    127.0.0.1

  • backup_dns_server

  • buffer_size

    65535

  • build_time

    2024-09-26T06:08:50.420311136Z

  • bypass_user_account_control

    true

  • bypass_user_account_control_data

  • clear_access_control

    true

  • clear_zone_identifier

    false

  • connect_delay

    4000

  • connection_port

    52683

  • default_group

    Default

  • enable_debug_mode

    true

  • gc_threshold

    1.048576e+07

  • keep_alive_timeout

    29994

  • keyboard_logging

    false

  • lan_timeout

    2500

  • max_packet_size

    1.048576e+07

  • mutex

    0ee1deb9-31cf-4fc1-8da9-88b87cb27fb7

  • mutex_timeout

    5000

  • prevent_system_sleep

    false

  • primary_connection_host

    military-containers.gl.at.ply.gg

  • primary_dns_server

  • request_elevation

    false

  • restart_delay

    5000

  • run_delay

    0

  • run_on_startup

    false

  • set_critical_process

    false

  • timeout_interval

    5000

  • use_custom_dns_server

    false

  • version

    1.2.2.0

  • wan_timeout

    8000

Targets

MITRE ATT&CK Enterprise v15

Tasks