General
- Target 9d58dd29dedaec3b06e443ae9aaeadbc3cf0e56f2916d2aad7f3326aab7cc04e
- Size 3.0MB
- Sample260828-hnf9ratwe1
- SHA256 9d58dd29dedaec3b06e443ae9aaeadbc3cf0e56f2916d2aad7f3326aab7cc04e
- MD5 5e43956bc86ae69f65ccff669673a07e
- SHA1 9eb945c1e4b518aa7f266a1d58f691fa73d9cc0d
- SHA512 98415806e46f2259425d13574fd13cb943bc58d6b6c98a2bbc7f504301deb1a5058174186a41e8841774af43b1a852ab1d0b8ea506fa3acc2cb0682d48e9b529
- SSDEEP 49152:XDrsIML6V0uG2HK2ac05/ZUfHVikuKYbnjNkl:XDNQ6V+nQQkuKYbnJkl
- TLSH T1CCE5AEDCDAE3F624D21BD67052EE2F0CDE697E95E7B2C6649A3DB31C4160365EA0C021
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target 9d58dd29dedaec3b06e443ae9aaeadbc3cf0e56f2916d2aad7f3326aab7cc04e
- Size 3.0MB
- SHA256 9d58dd29dedaec3b06e443ae9aaeadbc3cf0e56f2916d2aad7f3326aab7cc04e
- MD5 5e43956bc86ae69f65ccff669673a07e
- SHA1 9eb945c1e4b518aa7f266a1d58f691fa73d9cc0d
- SHA512 98415806e46f2259425d13574fd13cb943bc58d6b6c98a2bbc7f504301deb1a5058174186a41e8841774af43b1a852ab1d0b8ea506fa3acc2cb0682d48e9b529
- SSDEEP 49152:XDrsIML6V0uG2HK2ac05/ZUfHVikuKYbnjNkl:XDNQ6V+nQQkuKYbnJkl
- TLSH T1CCE5AEDCDAE3F624D21BD67052EE2F0CDE697E95E7B2C6649A3DB31C4160365EA0C021
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.