General

  • Target
    v1.zip
  • Size 356KB
  • Sample260728-rd6akahf37
  • SHA256 218aa6a477d05cddc9feff947daff71873880249bedef2767f66c7614dc25813
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      v1/nopingloader.exe
    • Size 543KB
    • SHA256 1f7f41521b52fb554ed6cd1466758a5d3cd479f44e71cce4ed631cad3a812f0c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Indicator Removal: Clear Persistence

      Clear artifacts associated with previously established persistence like scheduletasks on a host.

MITRE ATT&CK Enterprise v16

Tasks