General
- Target c07ef1e011ea4c47959d8562b3d11c6b2f9ac2f2e545642eb370066db56674e7
- Size 423KB
- Sample260828-ja4nkavcma
- SHA256 c07ef1e011ea4c47959d8562b3d11c6b2f9ac2f2e545642eb370066db56674e7
- MD5 2fb2afb8fae92cafc9f0c38d866e6b42
- SHA1 4f7a9912911adc4a8038d877ff66d660e438f091
- SHA512 ea67c8e1319099f93083285b4b21997da22ff85f46e8d315edc33d57367ff2e37d0d87995e0cd497e820140face7c21e0521f8959b3c234f56badc8aad342ee2
- SSDEEP 6144:E9lKgzelZNQSBQGH/CSpWqTfJNDr9EMeeetpJE1AgzhDZZZZZ6PvC2tiISm5fkuX:nfBQGH6Sf
- TLSH T12B9492435E9B466EC4000FB05C7987AA8E126D556B14B26FA1B039FBE9FD24203D1DFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target c07ef1e011ea4c47959d8562b3d11c6b2f9ac2f2e545642eb370066db56674e7
- Size 423KB
- SHA256 c07ef1e011ea4c47959d8562b3d11c6b2f9ac2f2e545642eb370066db56674e7
- MD5 2fb2afb8fae92cafc9f0c38d866e6b42
- SHA1 4f7a9912911adc4a8038d877ff66d660e438f091
- SHA512 ea67c8e1319099f93083285b4b21997da22ff85f46e8d315edc33d57367ff2e37d0d87995e0cd497e820140face7c21e0521f8959b3c234f56badc8aad342ee2
- SSDEEP 6144:E9lKgzelZNQSBQGH/CSpWqTfJNDr9EMeeetpJE1AgzhDZZZZZ6PvC2tiISm5fkuX:nfBQGH6Sf
- TLSH T12B9492435E9B466EC4000FB05C7987AA8E126D556B14B26FA1B039FBE9FD24203D1DFE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.