General

  • Target

    RedSystem.exe

  • Size

    607KB

  • Sample

    241218-mr9spawrfj

  • MD5

    933f2db7b8ded6946f35720a366e7b14

  • SHA1

    5411148b9de498d98e2ee67c8685717d8b44f4cd

  • SHA256

    ba8d4df86924743be143d569ac06b8a1b1d7e2c554720e7f31126a0db04c3daa

  • SHA512

    45a4b2474b63bfca9551dc21116fc33797fb62d9f57a439693152df0114a07530afc7de95dba417d9750d108bcc406388cb9d37bfe5e147b221c7accd33e07b6

  • SSDEEP

    12288:2LiIDxg9D7D8zxHk4la1v2mCVsNgSB+EKn6fGPR4Q5xx:2LiIlg9D7Doxk4ECaN3QEKbPR4Q5

Malware Config

Targets

    • Target

      RedSystem.exe

    • Size

      607KB

    • MD5

      933f2db7b8ded6946f35720a366e7b14

    • SHA1

      5411148b9de498d98e2ee67c8685717d8b44f4cd

    • SHA256

      ba8d4df86924743be143d569ac06b8a1b1d7e2c554720e7f31126a0db04c3daa

    • SHA512

      45a4b2474b63bfca9551dc21116fc33797fb62d9f57a439693152df0114a07530afc7de95dba417d9750d108bcc406388cb9d37bfe5e147b221c7accd33e07b6

    • SSDEEP

      12288:2LiIDxg9D7D8zxHk4la1v2mCVsNgSB+EKn6fGPR4Q5xx:2LiIlg9D7Doxk4ECaN3QEKbPR4Q5

    • Detects ZharkBot payload

      ZharkBot is a botnet written C++.

    • ZharkBot

      ZharkBot is a botnet written C++.

    • Zharkbot family

MITRE ATT&CK Enterprise v15

Tasks