General

  • Target
    cummersMG.exe
  • Size 272KB
  • Sample261006-atcvhsxdkf
  • SHA256 d1f32be6a9d1bfdc0489d06224b16d99aaa641d9e7dc6faad142bde79eb09e1e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • koiloader

C2
  • http://5.101.82.4/sparkles.php

Attributes
  • payload_url

    https://kavacanada.ca/catalog/model

Targets

    • Target
      cummersMG.exe
    • Size 272KB
    • SHA256 d1f32be6a9d1bfdc0489d06224b16d99aaa641d9e7dc6faad142bde79eb09e1e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects KoiLoader payload

    • Family: KoiLoader

      KoiLoader is a malware loader written in C++.

MITRE ATT&CK Enterprise v16

Tasks