General

  • Target

    77b4650847cb0c0389bcbe8feda2807d42d3f59cdd3f2b0b07f8dcc04e904fa4

  • Size

    4.9MB

  • Sample

    220527-y5afjabdf5

  • MD5

    1045d5010fdf546ab8e55bd112492264

  • SHA1

    9990e64a66758f5c2bdf4b166dec43c843c5fe28

  • SHA256

    77b4650847cb0c0389bcbe8feda2807d42d3f59cdd3f2b0b07f8dcc04e904fa4

  • SHA512

    8650a1a89afc63388a56b87cf8e28a624721825ebbbdd52ad54c9e93ff11d35bd112624c11808e70e3d69e4196f429d0659ef520e49ef69888eeb433bac6c4d3

Score
9/10

Malware Config

Targets

    • Target

      APT-Hunter-master/APTHunter.pdf

    • Size

      1.3MB

    • MD5

      8622e712ef414b421cd6422c8c959f86

    • SHA1

      d168dbc45f71ca23de3888c54720240c3f3a0649

    • SHA256

      a86f7bf6fe1eab25c877fdc745a8b696ac86efe145fa42adadbb164f5517ada3

    • SHA512

      c1a741ba5fca7a40da109b9da78177532b15e55e5b6fc0965191e3aa2bc1d12bcdf94642516276c44036f2fa4ce686f5b6db92cdfd851551081ad7032b3343e4

    Score
    1/10
    • Target

      APT-Hunter-master/APT_Hunter.vbs

    • Size

      63KB

    • MD5

      08472c48781d99a3e3d4583534e93fb1

    • SHA1

      b6e1fefe48152c40c939a2ade8145b41eeecf016

    • SHA256

      609ad8f99de0c08e14fb78452aa42a8f72ff92eb433ac7f6a88b84d376f7747e

    • SHA512

      b38d6455155ea0090a26f444701c0f282c0f27fd0b7773202a1e062330f5815bf69f51d3464ebb7bb56bb2f7f5cb3fa537f077ec625f774502a84f560d9ce8fd

    Score
    1/10
    • Target

      APT-Hunter-master/Tools/AmCacheParser/AmcacheParser.exe

    • Size

      626KB

    • MD5

      5614739792854897f86dcf2d0ed61006

    • SHA1

      4567a711321cc034c1296125bf5f27093d2be210

    • SHA256

      91148b38f25a9c720cd43ecd2571d684b81c4b865742526a672a07669b7dbf62

    • SHA512

      5119c02f178f7cab4bbe80240b8c65f794d556793e2959856b11a61988ffb95d6e141b1326dbc1ee99152f36c622365b8ed5811948c89752a36a0187cc0cce98

    Score
    1/10
    • Target

      APT-Hunter-master/Tools/AppCompatCacheParser/AppCompatCacheParser.exe

    • Size

      599KB

    • MD5

      47491d85ef7ef3803e25ba1cbfc4c265

    • SHA1

      956e67eb96906d123471f3d5d993b725fe3609bc

    • SHA256

      2284317845e90a8ad37c824e6e1c62cb2cd0bbbbdab14825e1e059f689e10cb7

    • SHA512

      0ee943e2a3d9a06813befc02260dec0b74866059ef6eb67de427f9770f411b15be125911b3c0f6e075fce89a1447f15e777bf9ef2fa3a80b2f068edaff818c3a

    Score
    1/10
    • Target

      APT-Hunter-master/Tools/HCTOOLS/jobparse.exe

    • Size

      1.3MB

    • MD5

      ea8592e6b7a67f3956c52a9f55a20f02

    • SHA1

      67060c9e03f6706d354b04c50eadcae45d5cc6d5

    • SHA256

      ea331db357411dd6c53e50b887a51b0ec82a4e4781ce68cd8c0d70ccbdfe17eb

    • SHA512

      2184cd4568406cf1c4ea4505df9dc55e308384d31795fd06736a8fe4a51ac8eeda456535438e1e837d0f41df5525ebd328a45c4d1cdbb387492818d997c78818

    Score
    1/10
    • Target

      APT-Hunter-master/Tools/HCTOOLS/p2x5124.dll

    • Size

      417KB

    • MD5

      a2a2e4737ddcf5c9345bd5981715eb32

    • SHA1

      b9bcae021af127ab063962275f8ba8cbc4f1b6bc

    • SHA256

      0c42f8339fa426e285c150bb0330539efd3c7c15a6b85ce7a9bbc83e969ce97f

    • SHA512

      376dc3ffcba17912d5626efa87c003c3a9bb64b6217f50c286d451ddc364ab790b8aba62cedd21127b4c2216d169d5eeab286c75e89800bc6e0eaa0c2c1e2058

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      APT-Hunter-master/Tools/HCTOOLS/rfc.exe

    • Size

      51KB

    • MD5

      df63a4d551a47a94915cb1fe3543ee00

    • SHA1

      a3bc72492a5e194422a1e6e7fef42cadaddbad80

    • SHA256

      2389a5fdc12b217b2c02be2ad83695227d8b04a4513b82440818982b33487d3a

    • SHA512

      5c9f5f83973d4a486850b9ed47dff5fc7e0aa702eef8cc1ed29f0efc36d2151525c6019e2014c0f8f16de92a3e1cce89ff3137d54154d1f8a4553ada19635f15

    Score
    1/10
    • Target

      APT-Hunter-master/Tools/HCTOOLS/source/bodyfile.pl

    • Size

      1KB

    • MD5

      eee053f46334760a82b534435a18c0e8

    • SHA1

      18bab15934c82e0586dcc43b2ad56d8125dbe2fc

    • SHA256

      eacd4be4075178627202dcb12c28232bc47a2dbc37213ce10c29853f5e503366

    • SHA512

      0dab8d77a07b2cb2bb6c9cd3cd15ecf299025359e0f23028138bcd7802aceb57642d00b9461e36016d5372058ebc77b1a6c1793ab3f038fc19369f40c19f8285

    Score
    3/10
    • Target

      APT-Hunter-master/Tools/HCTOOLS/source/evtparse.pl

    • Size

      6KB

    • MD5

      c7357619fa07e0a3c24132de7b1beb3e

    • SHA1

      9b23d9970f89637c5932a6baa9bbae08eef35fd8

    • SHA256

      44126a4eeca8aae3a568b47484eaf3319afc740630899c250cd87c03fec76f35

    • SHA512

      f611fbfb9ae9648023f5b5fe0d2ef64c58caf9727e65bb478ebb99d81ae76076426c9d0ccb2943b2ff70fdeb78223873abbdc401058e295425401ea24ddd75bf

    Score
    3/10
    • Target

      APT-Hunter-master/Tools/HCTOOLS/source/evtrpt.pl

    • Size

      6KB

    • MD5

      0149acb962818da6d82bbd877384d314

    • SHA1

      57e717c265b58ca3bf18c4053a3bb2553346533f

    • SHA256

      1c35e498b9ea169a3ac4fbb7b6fb63a84b21d8d85a9ca17a4b44bcc1c2ad18ec

    • SHA512

      e538b1e733780bb559169340118811a6a37d4afab4a96495d5afec583e91b8ebb7beb225d6e64f1164989f787aa2fa8a0ac843992a9b50c2eb47d57f7c70bba1

    Score
    3/10
    • Target

      APT-Hunter-master/Tools/HCTOOLS/source/evtxparse.pl

    • Size

      2KB

    • MD5

      65b2feb1d8f7478279f8a6b69f79caa9

    • SHA1

      58e1acd3b8dfa5174db4bf68b267a507c30004ea

    • SHA256

      c23db10c12319621206f0360f3fde7554518daa3f7fc8a6ee7a0da1a66548cd4

    • SHA512

      ca2f488ffa094d8225c7febb06d69c97e24dca3e2e4d2b96df6d0bf9e02dce73fbb52573c395e32d6f8ce09a19b4ddb673a3c0aaaa8cf5a7570d0683fa548954

    Score
    3/10
    • Target

      APT-Hunter-master/Tools/HCTOOLS/source/ftkparse.pl

    • Size

      1KB

    • MD5

      3eba7d6d92966862c543c1a6511456bb

    • SHA1

      4d124ed8a842fd25d848e57f7e8e8df96eddb6a5

    • SHA256

      d0db2b88fc54f444e4cd2d8b89e339140764ded8839eacfd989199a47f094db8

    • SHA512

      e3278d7fe4697bba6c413659f422142e269a259f306edc7c002050db7761186bae9b6a72207c258d6d5069f8c11a7f6d0f374ad4074e52c6d20ec21077b8a785

    Score
    3/10
    • Target

      APT-Hunter-master/Tools/HCTOOLS/source/idx.pl

    • Size

      11KB

    • MD5

      3317de46ef830970c2bb9af8b10cc6c2

    • SHA1

      91646db0213e86075d1d95121d68c715f3e046d7

    • SHA256

      38f1258de59e53e2836e1b91e30a52dd53d9b901d5ad55e9abb4e773b7fab3cf

    • SHA512

      9a78a915deca136500c7dce3d9e2acf7b0c6ce8a8b5bbd927e2a319c09ec4cd86525aead37c26ea2c14d0c63ac696d6fc4138252d9e66e07781fc222eb3de239

    Score
    3/10
    • Target

      APT-Hunter-master/Tools/HCTOOLS/source/jl.pl

    • Size

      2KB

    • MD5

      b54aff6fa7a01f709a3340ac62817c00

    • SHA1

      41df8ace28794558effbbfb83901a97ed6448ebe

    • SHA256

      922643dfbdea3a689b449d57228b82bd87dee02e3508fcd1762def9af4304c0b

    • SHA512

      479338c2ba75b74a259ca30e97deae87bc601b70ca8cfaeab88d917e7b98fec740716279c889f4f7a955b36b8c814de55d1329119ecc45b9a8a73264994b5cb4

    Score
    3/10
    • Target

      APT-Hunter-master/Tools/HCTOOLS/source/jobparse.pl

    • Size

      6KB

    • MD5

      e14caecd0b95481a131fc11411f66823

    • SHA1

      54a94bcddb20da8b90361459062f730a77188f99

    • SHA256

      4d8aeb2e6db63e84caaefad1f8685c1a72997d27597b3969380728fe1da2f26e

    • SHA512

      140c1a3dc2ad5fcfe16314a758c30550fdd6962cd7ed893105ddda6c6d5e7d56da2be73211e37693f5b26afe93aedfb903580b13362a09933ee8719d275c7a35

    Score
    3/10
    • Target

      APT-Hunter-master/Tools/HCTOOLS/source/lnk.pl

    • Size

      1KB

    • MD5

      4a3fad4d272736ebc00f30bfbc272afd

    • SHA1

      7a0b558663b555008eb2f57ffe507057c071425f

    • SHA256

      90edb61dea5961d463c19cd7c4b91649f170d67350d713b650be45e1a009b6b7

    • SHA512

      89495ac26fdc7a0bde54b9d8d6956660c3bbbc18e095442a388dac1fbc0d3b7d7f3bd9ff7f2b4bed646f453fa21418cd34f35ffabd7998640b6fb483a8487288

    Score
    3/10

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

10
T1082

Tasks