General
- Target 255c4ab2dc8ff7669541dac7699667c5735adcaa9c67ca76c64695c2d610220e
- Size 361KB
- Sample260826-shnrrayvbt
- SHA256 255c4ab2dc8ff7669541dac7699667c5735adcaa9c67ca76c64695c2d610220e
- MD5 95785582730d4c525f55462bef68b874
- SHA1 29e988f3dec9596b30882adb17b1a9a8db2b145c
- SHA512 ea73094538b87379e6e93babeea73a7362ad53f1ab561cfbc11aa7466db07ff0e2f64866eb11f092352e67203644fc56414beabb486487a52ab97b8faa7ae0e6
- SSDEEP 6144:NflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:NflfAsiVGjSGecvX
- TLSH T169747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 255c4ab2dc8ff7669541dac7699667c5735adcaa9c67ca76c64695c2d610220e
- Size 361KB
- SHA256 255c4ab2dc8ff7669541dac7699667c5735adcaa9c67ca76c64695c2d610220e
- MD5 95785582730d4c525f55462bef68b874
- SHA1 29e988f3dec9596b30882adb17b1a9a8db2b145c
- SHA512 ea73094538b87379e6e93babeea73a7362ad53f1ab561cfbc11aa7466db07ff0e2f64866eb11f092352e67203644fc56414beabb486487a52ab97b8faa7ae0e6
- SSDEEP 6144:NflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:NflfAsiVGjSGecvX
- TLSH T169747C04BAA4F0F6DD95047800EBAF36967EB4281726CBC7E354CE5D99113C3A9346AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE