Overview

overview

10

Static

static

3

Fling-Stan...33.exe

windows10-2004-x64

10

Fling-Stan...33.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    Fling-Standalone92.271.9533.exe
  • Size 134.7MB
  • Sample260711-dj8e8aay7l
  • SHA256 432c6e8843866ee7ce5067ca712ac14e0fe5c90dd4d32e58597c4c44ac0e5c96
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
onyxc2backdoor

Malware Config

Extracted

Family

  • onyxc2

C2

  • akmuniverstall.top

Attributes
  • port

    443

  • url_path

    /7e243e2b5c5ds7he/backend/api/app.php

Targets

    • Target
      Fling-Standalone92.271.9533.exe
    • Size 134.7MB
    • SHA256 432c6e8843866ee7ce5067ca712ac14e0fe5c90dd4d32e58597c4c44ac0e5c96
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdooronyxc2

    • Family: OnyxC2

      OnyxC2 is a Windows backdoor written in C++.

      backdooronyxc2

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks