General

  • Target

    ae0fbe8d451ba698e7b3a2d801176ad0116d6e676a497f0964241d6d3a2e88f3.zip

  • Size

    108KB

  • Sample

    250327-b4q1kaxqy9

  • MD5

    2137823e2849419344304f2e103c1c16

  • SHA1

    77f6698b5a0f7fad6715af5f67cd6452535a3394

  • SHA256

    ae0fbe8d451ba698e7b3a2d801176ad0116d6e676a497f0964241d6d3a2e88f3

  • SHA512

    ea548d427050f155b8c18a2ddb5c0009500581468d186f49fda47eb30e8ec498b973b7f696e7ac6c725d9ec98af8e5bb8398b3105ae8078aa18fe8362be97ba0

  • SSDEEP

    3072:mDfBNrSfZzCEeUY09+/lsMmzOT6If2sjNgx:eJNGfrYv/lYNG2sNW

Malware Config

Extracted

Family

hancitor

Botnet

2411_843763

C2

http://lielftworiss.com/8/forum.php

http://bilighbohooll.ru/8/forum.php

http://eummentur.ru/8/forum.php

Targets

    • Target

      57120da92792471020573332d1ff30fadf4496f77e2652229c6dca7fc8685ae3.dll

    • Size

      188KB

    • MD5

      e3659cd4b544ee02ba6f3cc307e601f2

    • SHA1

      8507242a7b307c912a9a2b1595e992da05f41ea7

    • SHA256

      57120da92792471020573332d1ff30fadf4496f77e2652229c6dca7fc8685ae3

    • SHA512

      724d7108f2bd7dffe3d87ea146806a934d1eed7b6c94ae8bd6840a818416467a97f4f2fec63d2576a4cba60fc848e72c66dffe143df6f1a2e79fa89b9d38ed3f

    • SSDEEP

      3072:YcIsRMkqZKpm5hK1Y0kFSzCtWVfHEeDaRWYKOfVielzH+D9:YM1T1YNF+CtufH5+c8fVdF2

MITRE ATT&CK Enterprise v15

Tasks