General
- Target Rexnuker V3.1.exe
- Size 13.1MB
- Sample260812-wlwtbazwbw
- SHA256 7afad62cbab790cbcaf336d790de4e3288b0abd254a52234c06dae8c1da7f3b5
- MD5 d8ba3abcab387f5f982e675ad637000e
- SHA1 c73d2708cf60e6b5ab17bf5f60bd1e57f43cd6f0
- SHA512 1dec44b1791e21b3980cde99b0911f625916e6c00fe912a4fb1278b46061f086ee8b3630d73f744e285ac35f0958008521389f3e491174404adfa6825c14bce0
- SSDEEP 196608:AWHZB4oPUy34gT1AKs80PGAoYEWL5P5prJKnCLNyhMnpcwzDhMhkd0HCxKxNnOpM:X5B4ocIARSY75prpLNyOpr/dACxSWO
- TLSH T1E5D63349A3614C68D2A6C7B80861D572B0F3AC2AD6407D4B47F05E9BBD2E9D34CDDE0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target Rexnuker V3.1.exe
- Size 13.1MB
- SHA256 7afad62cbab790cbcaf336d790de4e3288b0abd254a52234c06dae8c1da7f3b5
- MD5 d8ba3abcab387f5f982e675ad637000e
- SHA1 c73d2708cf60e6b5ab17bf5f60bd1e57f43cd6f0
- SHA512 1dec44b1791e21b3980cde99b0911f625916e6c00fe912a4fb1278b46061f086ee8b3630d73f744e285ac35f0958008521389f3e491174404adfa6825c14bce0
- SSDEEP 196608:AWHZB4oPUy34gT1AKs80PGAoYEWL5P5prJKnCLNyhMnpcwzDhMhkd0HCxKxNnOpM:X5B4ocIARSY75prpLNyOpr/dACxSWO
- TLSH T1E5D63349A3614C68D2A6C7B80861D572B0F3AC2AD6407D4B47F05E9BBD2E9D34CDDE0B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.