General

  • Target

    triggers 17.16.7z.zip

  • Size

    32.1MB

  • Sample

    230203-j67ebsgd7y

  • MD5

    71831d5a4dcd64bdc94b3a5af25c259a

  • SHA1

    c699dc3a1a4d1764c03ea3b8160de7d74d6384ef

  • SHA256

    d0613c74d0ffc7601a4909ca4616f1d5294fd258989d993142cd2760600157ba

  • SHA512

    0b6c3a781934d602dc638d52f4994724cec72d555d511e6fcc982c81915e971d5b50d387d79eb940c13c97816163c182ebaed558b98bb281bccaf53a7384f3fd

  • SSDEEP

    786432:zfJv+2UZkCRWxHHWxl7T5veLTsi1Ffa3JJ3GWSK/yfYdaOeWSrmCsc/M4:zhNItjwwi1FS3JVGWSK/GWHRoM4

Score
9/10

Malware Config

Targets

    • Target

      triggers 17.16.7z/Advanta.Triggers.Store.dll

    • Size

      97KB

    • MD5

      a14d0d67f27e6ac223aa58dd9bb21f21

    • SHA1

      cfd8585d0f185b0351bc9f70f57858a9d5cd34b7

    • SHA256

      3530fdc56a5193c94c84a0ad448b7a1ebf32342ea8c77b837a03c449c6cfcb51

    • SHA512

      434bb1f41b0df38078ca52e8618383557130f1f3d248c6d75b30bf417c19ba21fda4a392a3bb65b7d7cabce7c28ae2bb7e6d4dd6d305c16003af4efd1e0c6b78

    • SSDEEP

      1536:oirzyyOm6qA2DUFs9VXHjew8jcGnnRyD46WiON5VvJog+DfPejbUwKg/N:GyOjqBIFs9Vo9nnW46ePRdXzKg/N

    Score
    1/10
    • Target

      triggers 17.16.7z/Agent/Microsoft.Extensions.Configuration.EnvironmentVariables.dll

    • Size

      19KB

    • MD5

      b8680e597bf1853ea21dcf8adbc9c4f4

    • SHA1

      6d49b275edd01fbf4f3afd116a71a53278cc95e0

    • SHA256

      cb862d6388a5124207291898b48a8e1240baa297224fff3b348ab4637ccfdfdf

    • SHA512

      111ab8f2de3eaedd0758a7313c59df1420bd7b2e06926bc3254859902b8bd982f52912b3a73384202160d23a50740f6804678327ead134e17189585e3fc968ed

    • SSDEEP

      384:bcQbUXTMaTlMkKozKjzNGpFkV28EWUKeW2dHRN7ss0uw7lGsV9o:gQoo728MsHCS

    Score
    1/10
    • Target

      triggers 17.16.7z/Agent/Microsoft.Extensions.Logging.Debug.dll

    • Size

      16KB

    • MD5

      b9cfbe1ad501d9a90a6124d916d86e1a

    • SHA1

      2e9571a869e5a744c89c8f335a2768b6d5bb95bc

    • SHA256

      76d24930e27e45ff1ead1e71b571c5d178d52bc6dd762acdf0485ae074fd6e70

    • SHA512

      8271ad538ed1829c142a2743fd7659ca438f06ef1f5c7b263f0b1e8ebdff495dcb4d897575e7622422e462d5dd1c62b1c04253f45282c070a3c221e5e60e1541

    • SSDEEP

      192:3nv/S9SPDrQJ9ZASFWJuVMWLlW4GD5dHnhWgN7aQWrjEbsE4eAqnajKspm:faFASFWJuVMWUdHRN7QjEpJAlGsp

    Score
    1/10
    • Target

      triggers 17.16.7z/ApiGenerator/Microsoft.ApplicationInsights.dll

    • Size

      145KB

    • MD5

      dfd992432ec9404da4260fb629d0f142

    • SHA1

      134f9e32a5f236839786b59dd8ee2692111423eb

    • SHA256

      7fb3e1e491fd48cb986bb425c943173abca4ea58847c4db407632db7af730d90

    • SHA512

      664bff9f6823472ea639b99feefcc8cc8cdabde2b861761b9f337e22da1d14ad0ec8ed62c4210a791470fe00a917ea43fe07c39f6860b77241c26f586baad483

    • SSDEEP

      3072:E5ry8v/SjJJZNm36iF2/4sm9UjVvK41jPIudobVCR6fNVEDh:mmcajJT4smL9VW6Wh

    Score
    1/10
    • Target

      triggers 17.16.7z/ApiGenerator/Microsoft.DotNet.InternalAbstractions.dll

    • Size

      23KB

    • MD5

      eafc60cf6f13766c9ab96f5b23457252

    • SHA1

      8f8d4c9a0b1f700bc2ad8134b3200ce0683e95b9

    • SHA256

      afd22ba2a118645e049e27d65164c97125e416934d1cbd16fa0f231d0fe68f5b

    • SHA512

      05eea2190a22c92087240f25e53b0e641eb623dedf5f413019dc31d8f0c22ac1c264f5c177f9d8766455dde243e31f0ae45086b30b168be92c761f194c61447c

    • SSDEEP

      384:4lh9/6E03NtsKOptTmXSyF38fevZtfnERHRN7nlkocwG:Qh9uLsaXSwtfnEByow

    Score
    1/10
    • Target

      triggers 17.16.7z/ApiGenerator/Microsoft.Extensions.DependencyModel.dll

    • Size

      56KB

    • MD5

      c99274e8d8276563d8cefa3870b54b75

    • SHA1

      90a1325a25bad7ca88b80305599f9027981c900b

    • SHA256

      c9eb87d14a9d170badcbce407888c2a565f1f216deaa6d615d1e741c4b62c10b

    • SHA512

      6f1c913c1a96dbf0b4876a4d48621be7e4b2a5fb129a87615296c277098df3acf22db5f72154de5e07f2ca04fab38957a6e97c46de6998a8fb75369831ca11cd

    • SSDEEP

      768:9yxMizr2uk9uIWfdHVMsDO8WH+OEBBfuz:9yxzrfIWfdHu0ROEBBf4

    Score
    1/10
    • Target

      triggers 17.16.7z/ApiGenerator/Newtonsoft.Json.dll

    • Size

      457KB

    • MD5

      04d49720df76d62bce434f19a0da62d2

    • SHA1

      53d0a3b91036092132f4d0887500b5dc77891d78

    • SHA256

      5d96ee51b2aff592039eebc2ed203d9f55fddf9c0882fb34d3f0e078374954a5

    • SHA512

      7727d077c518d4931b80286edb981af0e46d792cb9976de286cd2dbb4270157c5fae14766b2a39d49b44b41e5ec113de104dd2264edd1dc6799c9919b2f76d04

    • SSDEEP

      6144:WDGFyHTh/mZT9sNgyOj4ACNXfHDA36FuxMbPL9YjKecarCkHTaRypmV:9EQpsNgy/0jKeYyk

    Score
    1/10
    • Target

      triggers 17.16.7z/ApiGenerator/NuGet.Common.dll

    • Size

      52KB

    • MD5

      13658bd4bda2f9f253db854a3c59a2f5

    • SHA1

      61978cf3d9f71858d4c1f859ab68d83f71d74722

    • SHA256

      e5ed0bc6d545dd3f179818eaa5832f3e3eedfacf7e0fa22f8e99791d180da1db

    • SHA512

      d8a21ffc3b1176565a76398188bc1fa8f8ac1afe82db7c141a4589bae13def3b0b0cd62b375188540211b63a55913be6a8d22633eab39545c40883fd9214d221

    • SSDEEP

      1536:UaMOEBNDGoU92QQ44I4LI5CvF16q+4yupEBgl:UxDGbYQQ44I4LI5CvF16H4fpEyl

    Score
    1/10
    • Target

      triggers 17.16.7z/ApiGenerator/NuGet.DependencyResolver.Core.dll

    • Size

      56KB

    • MD5

      7bb5e3745048afe05e74447360f9aa93

    • SHA1

      7255bd83fe774dd690ffde0d31f83083873cdf89

    • SHA256

      3cd83db5b1d308c9b43b0b84ddc09b2310a950659f40ce5017394168e9c5ed05

    • SHA512

      bb4b90b06c8b21b99496a31049149ae86de79794e1894af7bde2b8f39d528b18229469d472e813a2db0942b3306c329e0625d75073ca20fe36c922317bc5a34b

    • SSDEEP

      768:l2dLkWFBpseWK33nGrz3dcSGzEcjp6a1OaJvQ076iFWEBB7EQ:2kwBpseHHGH3d+fQ8vQC6IWEBBYQ

    Score
    1/10
    • Target

      triggers 17.16.7z/ApiGenerator/NuGet.Frameworks.dll

    • Size

      99KB

    • MD5

      0008b334bed7f0f62057fcd0ead4e42a

    • SHA1

      28c18b1917a075d016f0a6f815b5cbd653b015bd

    • SHA256

      634dff4bab9ae45678883c4a524d21099a2a6491f874bc5e617989cd59a48d63

    • SHA512

      7c29d6fe846d61c7512c885b39620c28e2ff78f2dab9d4ac03df8971d9cc21dcbf2d50e2b8de24199892a57249d81647f74d10998c7b5710e3134a3003058259

    • SSDEEP

      3072:uFYckvP6ZYIwtS7h/0oVk5Yvd++ASSE1b:lckvP6KIUKKgEKb

    Score
    1/10
    • Target

      triggers 17.16.7z/ApiGenerator/NuGet.LibraryModel.dll

    • Size

      37KB

    • MD5

      97aa728206e12e657278629bf1f4d8dd

    • SHA1

      caff0609ff2d47f2d57cc4db65765aa33b596072

    • SHA256

      fffa2e4368d9dffbfc3438959aaf21603858796d9f1054bc6002cf699c51f127

    • SHA512

      99f2263a4bb5b0274a0c8691004e210a0157effb7fa0153a2855c63f7b9f7efadb3f68a8097c775efddf362191dff77b2b1a55656f392735d9803ad0f7bcbf42

    • SSDEEP

      384:oFP5n0RPz9UXiAK3ikSeTrHD7QvSj2O3aCPYXbdu4RyaWW1+10vq0GftpBjEEDFT:OPx0RPJUJKySVp4X44tJi+EDFEBBbq

    Score
    1/10
    • Target

      triggers 17.16.7z/ApiGenerator/NuGet.Packaging.Core.Types.dll

    • Size

      31KB

    • MD5

      5503c3e80a803e78d3cc2ffaa6475023

    • SHA1

      9b996d247175eff5eb7e58b7fba02c589ac85eb7

    • SHA256

      b3141700dc624398909e3724fef7f7c1109b2d3bbf7ca477c6c42ae824b58c14

    • SHA512

      07e562076409e5f92f6753cb41078c8f9abb1e6ce315074821c7858ddec6c89f383441844212cb0f57e81394f17729cbec5be5908d606f677d1387a241e2ea51

    • SSDEEP

      384:S3/6Cnen9aYHSrgRdxxgSn9+Qy7OaW3/6UH+10vq0GftpBj/ERHRN7RlX2P:S3y99aY+Q1jtyI/6UnipEBrW

    Score
    1/10
    • Target

      triggers 17.16.7z/ApiGenerator/NuGet.Packaging.Core.dll

    • Size

      34KB

    • MD5

      fd227fc6125b9a6a038ccf040f3945c8

    • SHA1

      ab2750cebe25b1473032571434ad03bf2c293b40

    • SHA256

      6be300cdf4c4bac3a28dcdd627f123fb4a75e802a96d69efb9a5c138aa87e282

    • SHA512

      44e2d2337f0df2719dbfa651bc79d7c1e851a9f5a21afdb49548ec73868b640bd3554cb4de91f5aa84ee51cb3a125ee868801b2e90d8ebed2d0eab11e8e4b08a

    • SSDEEP

      384:KH+2Ch7p5Bp8m1cnn/cYlMsE1KhEAqjtOVQjDJrWPXxWtO6VC77q0GftpBjFVorZ:KH+287Npvu6YhPVg0PaO6Gi7Ah9EBWt

    Score
    1/10
    • Target

      triggers 17.16.7z/ApiGenerator/NuGet.Packaging.dll

    • Size

      172KB

    • MD5

      2bb3c3bf34d42fb03e2004d02d9ab349

    • SHA1

      8eb1a8532d055c077726db3b17ca9ba2eb21c9d4

    • SHA256

      47133beaa748ae22a79d31b67e9ee51dceafae2a68fac4802befa0bc98894df6

    • SHA512

      1746c27ca6d68d2ea241247bcd5269b318f4ecd6ff79854cdf7ce8fc3314d8f9812c2738f39c6a58f6bbe56115772f40d18866cae3f4065fd199f6853b740774

    • SSDEEP

      3072:YG1ZZoL3dVBZhC5/rFbA2Lp7uAftz1y9xZ54cpEfGyPzBMZ482xnUt1u4/LhOjl2:YuB/rFs2Lp6AfXwZ54MEuWxjlyPmO

    Score
    1/10
    • Target

      triggers 17.16.7z/ApiGenerator/NuGet.ProjectModel.dll

    • Size

      96KB

    • MD5

      b94ea2b179daef23665bd6a9af0e333b

    • SHA1

      48c54c211f5f332911a825fea009f1e57b6650c1

    • SHA256

      d9be5d97b4e27a96769722540dbc2bbe69b1eb3730f9216efd6738b2d23d2741

    • SHA512

      b3370c02a9072ce382a30b6e08a1f7a6fb9f62175aac84dae7f77ab59b86a350de26a6a6a876c46081538d2dd08eb44cb73b551ff5c583135983c16b9084fbd6

    • SSDEEP

      3072:6O2ysu628MvxnAzxZ3xhz0mHs118QRYEnE8R:WysP2tAre8QRzR

    Score
    1/10
    • Target

      triggers 17.16.7z/ApiGenerator/NuGet.RuntimeModel.dll

    • Size

      39KB

    • MD5

      fe22ad959b7820e7d926455279190bc6

    • SHA1

      76236561fffc740f01da86b78b86bec09e9f87a7

    • SHA256

      3e6e0a9b2a584e46ce256c5adfd5f4ea2a490a4a06c7695628744d87710b8939

    • SHA512

      5632c5dc5261c9772a6a16452f5a82a34d6c5c885b648ca965d783a4a523d116cab2d3ac0d6c1737044e5a6a85a247702e5e1717e315225ec10fe6956ee63f8a

    • SSDEEP

      768:nujoTuPXmslEerO1E4N2Xn4dFlQmGuiROEB0dz:uIuvmeEyWVNAn4dFlbGu7EBSz

    Score
    1/10

MITRE ATT&CK Matrix

Tasks