Overview

overview

3

Static

static

1

Bin.zip

windows10-1703-x64

1

Bin.zip

windows10-2004-x64

1

Ephemeral.Runtime.dll

windows10-1703-x64

3

Ephemeral.Runtime.dll

windows10-2004-x64

3

EphemeralEd.exe

windows10-1703-x64

1

EphemeralEd.exe

windows10-2004-x64

1

libgcc_s_seh-1.dll

windows10-1703-x64

3

libgcc_s_seh-1.dll

windows10-2004-x64

3

libstdc++-6.dll

windows10-1703-x64

3

libstdc++-6.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Bin.zip

  • Size

    759KB

  • Sample

    230331-yhlkaaec5v

  • MD5

    8163dbd06ed50ea6d34693398355bec7

  • SHA1

    7b2906d30897afc3448fa7a1971d8fb7552ba0fd

  • SHA256

    0fe8f2044189a284d991b7eb5689c371718c67d3d539f696402665c02319b14e

  • SHA512

    897bbb209f6ca31705f9b4afc3a3e05617be26a166d98d1754674f8cd968c7e20de79b3d0e899d53d92a450618ee901220cdf19c97672c03b7d8b31cf70bc1db

  • SSDEEP

    12288:kfl4VYCnpQlKB00SHoPfcSTs0fkZl3TtlBb+LG4eVJoWp92WcTjSeFp7gEeU26Nv:ESVYCnpUKSIncSIEe3TtlBb+LkVJYSeZ

Score
3/10

Malware Config

Targets

    • Target

      Bin.zip

    • Size

      759KB

    • MD5

      8163dbd06ed50ea6d34693398355bec7

    • SHA1

      7b2906d30897afc3448fa7a1971d8fb7552ba0fd

    • SHA256

      0fe8f2044189a284d991b7eb5689c371718c67d3d539f696402665c02319b14e

    • SHA512

      897bbb209f6ca31705f9b4afc3a3e05617be26a166d98d1754674f8cd968c7e20de79b3d0e899d53d92a450618ee901220cdf19c97672c03b7d8b31cf70bc1db

    • SSDEEP

      12288:kfl4VYCnpQlKB00SHoPfcSTs0fkZl3TtlBb+LG4eVJoWp92WcTjSeFp7gEeU26Nv:ESVYCnpUKSIncSIEe3TtlBb+LkVJYSeZ

    Score
    1/10
    behavioral1behavioral2

    • Target

      Ephemeral.Runtime.dll

    • Size

      111KB

    • MD5

      249ea84585865aaeb4ecb126f12e6baf

    • SHA1

      a849e55bf6f2f46aa3e0713f033ecd020f4debc2

    • SHA256

      71ff22ffd4dec453b73f8ad1d844b7cd5ed35adeacda1bab06c64874c09cb4e6

    • SHA512

      37f30e0ca6490a665d57f7231589dac1fa6cf28eb2e129bdd2777310777d5157e0bc41701910dfa0bfd4884ab4e42e5b395130668b4d8dba3949f28bf7567d1c

    • SSDEEP

      1536:LHnzcVCZZ1Qr9J6EYmMC4BLavhMmPi1naP9a+rAtZnT1+2HeVaN:DSCZZ6IxV5

    Score
    3/10
    behavioral3behavioral4

    • Target

      EphemeralEd.exe

    • Size

      107KB

    • MD5

      2636be1e14906a231ce4e507f4182838

    • SHA1

      97d7987d505c4ed231398ce756d1899366eb308a

    • SHA256

      c695e15c4db0d0291137ab058bf53670515c0f22221db0686365aa7adeb13739

    • SHA512

      b75a48770654836c33298cf2266811bdeb5646cebc5a18cacaffc355d046d672d66f842e161cc397048c2efeb19e2966a76652f6dff1dbb2562bc61fd5286274

    • SSDEEP

      1536:VQRCaufxsw6RFjR6POLYrO/rgfoE6x1ZjW3QaS9h:VACaIVKZ/PVx

    Score
    1/10
    behavioral5behavioral6

    • Target

      libgcc_s_seh-1.dll

    • Size

      100KB

    • MD5

      99515d5d00704a3c9a602a4de97ace85

    • SHA1

      2093b97a2d245e0d395f2d6c7636475168983387

    • SHA256

      5c9d9f1b931dc5b023ce2713fe59d4a332da1127a2fe0474625daf2ce7364772

    • SHA512

      f6057425e9a64b3d63459780a167da7a9341b800472cdc4425b1f5ac00ed659aa5a1a02425353e6e43dfb65c0731d4172a44b236e59ff02919e05cbe9d63a256

    • SSDEEP

      1536:CKY2RMx/RJ/hvOlkb0RgECmkBnzINRwfsZM3ZX71GlXHWCnTMawso7:CORiJ/hvOlk0R9kuNyfFZxopnTOso7

    Score
    3/10
    behavioral7behavioral8

    • Target

      libstdc++-6.dll

    • Size

      1.9MB

    • MD5

      2514e50f9750aaacfe27d275a04d675b

    • SHA1

      3d5688156cf4f3ea8f0784a511ce32cb2b8fac74

    • SHA256

      e40380a8453efe6b34291c71848d3db5af5f214763de359e8d38fa512528dd93

    • SHA512

      c89af85b34f0c1f8c69b29f77f8135b2b5b9d5c5fa424e8a503a6c9911dc25c0136fadc3fe7825fdb46c78c78c87c1721a6e446cc8eba4e8ed12982d3a1c99de

    • SSDEEP

      24576:xX8v1mM5K0Nq9etN/h4d7NCufTwIyZR5lF4PeYnhSMXlroUf0uKzV0d4:xX8v1mM5K0c4tJhq7NCufTw9RbIeYK

    Score
    3/10
    behavioral10behavioral9

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks