General
- Target o365sync.exe
- Size 103KB
- Sample260826-fen7wsscrd
- SHA256 94d6821670b35e64ae9491d09491b6d2dc7046e85ad0477085a799aeab6deb41
- MD5 e64afed480a7d816697791703f72c0f8
- SHA1 1fd5c488a3530bd0346abf6dad7a50f7ff93011b
- SHA512 25f1f3c95a0215f54a02c6d714b2e8e2f5574ffc28cc12075175dda8aa0c69369b53d6bd96cc8fc7c8d95295124ab3da7c7ebe6a615a42bda6f660724ef81e91
- SSDEEP 1536:KXZUVdjqAGkl2MkNGsAjOxDJlOmuqt/UpVbZTjfqSHpvyKF6cZOeb+k9cY2u96zW:9HVaHKHfbqznmiBk7kEn
- TLSH T16FA36336E7B3C4ADC05EC638AB87A4B3B9F07C5C463475194781A6213B5BD386BBE184
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
adaptixc2
C2
-
48.217.68.28
Attributes
-
port
8088
-
url_path
/updates/check.php
-
user_agent
Mozilla/5.0 (Windows NT 6.2; rv:20.0) Gecko/20121202 Firefox/20.0
Targets
-
- Target o365sync.exe
- Size 103KB
- SHA256 94d6821670b35e64ae9491d09491b6d2dc7046e85ad0477085a799aeab6deb41
- MD5 e64afed480a7d816697791703f72c0f8
- SHA1 1fd5c488a3530bd0346abf6dad7a50f7ff93011b
- SHA512 25f1f3c95a0215f54a02c6d714b2e8e2f5574ffc28cc12075175dda8aa0c69369b53d6bd96cc8fc7c8d95295124ab3da7c7ebe6a615a42bda6f660724ef81e91
- SSDEEP 1536:KXZUVdjqAGkl2MkNGsAjOxDJlOmuqt/UpVbZTjfqSHpvyKF6cZOeb+k9cY2u96zW:9HVaHKHfbqznmiBk7kEn
- TLSH T16FA36336E7B3C4ADC05EC638AB87A4B3B9F07C5C463475194781A6213B5BD386BBE184
- MD5 SHA1 SHA512 SSDEEP TLSH