Overview

overview

10

Static

static

1

extension/...t__.py

windows10-2004-x64

3

extension/...pat.py

windows10-2004-x64

3

extension/...t__.py

windows10-2004-x64

3

extension/...n__.py

windows10-2004-x64

3

extension/...t__.py

windows10-2004-x64

3

extension/...ing.py

windows10-2004-x64

3

extension/...til.py

windows10-2004-x64

3

extension/...evd.py

windows10-2004-x64

3

extension/...til.py

windows10-2004-x64

3

extension/...ter.py

windows10-2004-x64

3

extension/...ile.py

windows10-2004-x64

3

extension/...ing.py

windows10-2004-x64

3

extension/...opt.py

windows10-2004-x64

3

extension/...per.py

windows10-2004-x64

3

extension/...per.py

windows10-2004-x64

3

extension/...log.py

windows10-2004-x64

3

extension/...les.py

windows10-2004-x64

3

extension/...tch.py

windows10-2004-x64

3

extension/...mon.py

windows10-2004-x64

3

extension/...t__.py

windows10-2004-x64

3

extension/...ils.py

windows10-2004-x64

3

extension/...ook.py

windows10-2004-x64

3

extension/...rts.py

windows10-2004-x64

3

extension/...ole.py

windows10-2004-x64

3

extension/...011.py

windows10-2004-x64

3

extension/...ive.py

windows10-2004-x64

3

extension/...ost.py

windows10-2004-x64

3

extension/...log.py

windows10-2004-x64

3

extension/...key.py

windows10-2004-x64

3

extension/..._qt.py

windows10-2004-x64

3

extension/...ts.xml

windows10-2004-x64

1

PotSplash-...sh.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PotSplash-BETA.zip

  • Size

    127.9MB

  • Sample

    230403-t2nfrshf2t

  • MD5

    94e45213e89baac847c24e48e2a11c3a

  • SHA1

    ebace4f45583912ab0227462ed4d88c0cc70c772

  • SHA256

    fb38fd1b8ff1c9b7d5348f360ceaf6eb129f431f2747fc85d521039eda2d175c

  • SHA512

    4b510690ec261885659c4ae3e5ffa3a44c8d8972ee5e7694617963491b1355870a8e75d22e35411c691928f36f3eb7bdb1f07f37b800082a22366782b871b988

  • SSDEEP

    3145728:7l9MU0FxMBSsJOlHY30eUHPHVkaX4xSt7UaaVxV:BP0FqBky0BHfVf4kJUaaV/

Score
10/10
lummaspywarestealer

Malware Config

Targets

    • Target

      extension/pythonFiles/lib/jedilsp/zipp/__init__.py

    • Size

      9KB

    • MD5

      8320048758b078019f9fe9720044b066

    • SHA1

      0c12569572bb0425c489b5ecea06532e958edeb4

    • SHA256

      661a8a1d74108ec9377b8b31104ed6762b16665d57bd3ceb1144d072331be13e

    • SHA512

      f15fb22f83fc147bbd65c5f486fa02c29204c70be1a64c458132a22b03c86c9b81633d86884f8c8c733e0f8800d40287e5e2ca2802b0989a6fc82e055e749676

    • SSDEEP

      192:E9LqSY7fPZ9NEKwzc6QuHguO0h9hD76NQ19aOZwi+BL:E9YeKwojcO0h9hfcY9aqj+BL

    Score
    3/10
    behavioral1

    • Target

      extension/pythonFiles/lib/jedilsp/zipp/py310compat.py

    • Size

      309B

    • MD5

      17c256fddbac1d031d9e00815e4bd5b4

    • SHA1

      c3f7d359793c3f8673ad47f3c8a778082bdb4ee4

    • SHA256

      1d01b821ff9e239bf8453f3651a824ecfb8bb1b9c9ec72a08f4690286440a7c3

    • SHA512

      0bbcfb251e891aaec494a6e1ab60f6c68d3ce69e2d2b46d2eef43a090bd34d43a9680d8ad7fafd09b8f827ca43fa9aa36336323714ece0f5e94590509ae70952

    Score
    3/10
    behavioral2

    • Target

      extension/pythonFiles/lib/python/debugpy/__init__.py

    • Size

      1KB

    • MD5

      35dd1a1b2b1b08813adbae461d7767a8

    • SHA1

      8b0f1b41e42267803b20db07645f531d7d2f947b

    • SHA256

      17857ddf2d931fb404b1ad11aa4c83377dad532ce50a72802f6c72bdd6713601

    • SHA512

      5c5b82ab609ad1d3013cfc86d98ea6456d9c5ef47ba472ffe90dd345f9c64f89fa19aa9a842acdc6cd7c45b857db743f4f6f898812c670069747f1f2b3b427dc

    Score
    3/10
    behavioral3

    • Target

      extension/pythonFiles/lib/python/debugpy/__main__.py

    • Size

      1KB

    • MD5

      3206c2d6ca758d059f8a645af98719db

    • SHA1

      1c41a7fe65b85fc0e261c31ca162e5b7ed13c986

    • SHA256

      4bfd019e91d85c916bb0a9d58ec9673dc78d7918d1c2667384e42eb4a297fa8b

    • SHA512

      58dfcf5f1f85132117867e069778329b56b3c0992a0bacbab8d99fa9272e59c5b12714007636e5bf92907193a0b8b88d64f3b323eb34bbae774016f42e479b39

    Score
    3/10
    behavioral4

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/__init__.py

    • Size

      3KB

    • MD5

      32b456372653a71c1b26064e6b336a71

    • SHA1

      5cd3d19c6ba2d77d6f6124f744062074e4b290ad

    • SHA256

      5f62cc11bf547d8cda606938f4c7f5aac98aca416b8613b4d5b31cfa02f27e1d

    • SHA512

      ec2dafeb927e3a498a390cf4456e0aade5c944cc4c131031f60afb9f6eb43a52bd41d8114701f0bfb2fb595b5c02f2bf81c84437f51f1c40bf9c44ae4055b144

    Score
    3/10
    behavioral5

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/_pydevd_packaging.py

    • Size

      1KB

    • MD5

      604c04221bcf668ede3596a7833345e4

    • SHA1

      8d0c2c441931f6a9773640ff095c0d524427b1ff

    • SHA256

      65e40179e0ed1b78bbe5709052cc985f709f2387c034193d9c23b0a4b275c871

    • SHA512

      447c28832b5864bac5f5583e1fe142154c1ab3d9419381860aaa64c26c01c2214888d54d64512451c139528d26e9f14d2ae42cda17e09e415a2dc039344ae803

    Score
    3/10
    behavioral6

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/_util.py

    • Size

      1KB

    • MD5

      4f57d48c0e6d58802f41da32c221c516

    • SHA1

      6b7d2c014e4b435f74b0898c48cfd85311c8ceee

    • SHA256

      9e47c5bb238ac0f518d4c9e4bbedfe4982100de51e89d10f9256890b2210813c

    • SHA512

      40cc7e412b86eb49a3861fbec3cc4890dcf791f1843845322ccad4b3605b8199f1ca1d5e26c17e7c7f5b91e7010badcf5af7a97fc24eed5de5c63d08a7f1a55f

    Score
    3/10
    behavioral7

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/force_pydevd.py

    • Size

      2KB

    • MD5

      d354a8b403746d6f73a62b6c732bb153

    • SHA1

      3767fed4e6f15fa995e8643ebe6452454f5db050

    • SHA256

      2954dc2a379026f65b6e18a3d9afb1061b401ff6eeaaeea2b4b1b545842f6884

    • SHA512

      ce1a4b9821594a4493bf854dc7caa14f55725eb6a3a09894bee685f3b797fc554b9e3461cd68c8a3111a0aec5844ade8f89953d9fbd59572d6ff76557bbc8976

    Score
    3/10
    behavioral8

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/_pydev_calltip_util.py

    • Size

      4KB

    • MD5

      5bf8c8b5cf5cfb668bb860a13475c8f4

    • SHA1

      fbe470f0d27301d20a5fafe221b7e83af72d2b00

    • SHA256

      a8991e2b35185add3ad0624babaac6cd8f4f0d8a81c4305ea30f0f6e35794a5e

    • SHA512

      529a8dcf6988e7f75f0ab733ec084d47323e7a7e3c775f3d079bbbc66d1407a4bbaeeb870efd6ceb0d20f22b3d97dbee538941792d6bfa5436fabeed54d8658e

    • SSDEEP

      96:wi8Nyh4n+A8re3wcGdhfn8v1D4IdwWU9t0Ymmq4YT9syqUAg98xtWxO7C:Dmyu/WsEhf8vR4Id9gZkuxgxO7C

    Score
    3/10
    behavioral9

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/_pydev_completer.py

    • Size

      8KB

    • MD5

      637053d74cc4ef1e499fec16ec7a109d

    • SHA1

      c06f8677bf7e723540074c951865ad8fcb35c4b0

    • SHA256

      ad0d6505ee79b6771f70ec2b31164bd4050cab1f5fcb049de6845c0ff2e37d11

    • SHA512

      1efeef921d3b97039a3e9201059d31a5d5e9660c118b6355ae59d81c10c3fec99e3528e78ab9ab0c04639deb1b3f7a2489140876ef1685fdf182d04721b9ab39

    • SSDEEP

      192:XvX97HuLfh8riRRemz284qEq8BJwVxMmrm5dNU1TC6z:fX9buVqiRRemz71EvB64a7TCy

    Score
    3/10
    behavioral10

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/_pydev_execfile.py

    • Size

      497B

    • MD5

      7fd54f3eea9fd3f02dea94c9321f95db

    • SHA1

      b9e91d2c35f0a50ff9237655e638b90a87027d49

    • SHA256

      ece6d8af8e73d8afa7d39e8ec89d245d3b21278c5eb1fc34a78bb6d6ab4ff591

    • SHA512

      9e29bd43c718e60c439aa303d5fbf369eb34cb932b08b6f74cfc86fcad205903e9ecd59665495b5873e4573630b9f0e1e9c43d1f424dca6f15599c9c116ae4eb

    Score
    3/10
    behavioral11

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/_pydev_filesystem_encoding.py

    • Size

      1KB

    • MD5

      097a31c4f0590ad4ed3d23932a74c232

    • SHA1

      5b93c87cc3c7d2c4843074a49186fef9b6d9ed32

    • SHA256

      18020300e1c32997985cce7340cee79b2657ebb20a9b06090b5e3478b38ae0df

    • SHA512

      22a456aa7ec1a42a2103b771a540204d9627b3f407c15dd3d4bfe54eb7885ef0f2e43fcf68d82a739226f6fffe21432cc82c530df4d530f16ede2386347047fa

    Score
    3/10
    behavioral12

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/_pydev_getopt.py

    • Size

      4KB

    • MD5

      f57975b3f07dd45c33fced6678884c07

    • SHA1

      8e4e4fa900abebe189f664a24dd9458b6143412a

    • SHA256

      6697a1e1c3e9f11706de0491ae5eac0d4643decedf19b23e3d23daa84fc290c6

    • SHA512

      cabccf2302f1119e599aaf120596966c45290337a232ff1da328f1ff027c211c8c746b5f40ee1f620f5bf7b0785dd1f8a54b9cdff75290cc0eb18384b2a26b31

    • SSDEEP

      96:yHBvCC3EFmRJuz8+zB479pJds5yXv8Aw9mx:QBnUF2g8+N47LJVX0AD

    Score
    3/10
    behavioral13

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/_pydev_imports_tipper.py

    • Size

      12KB

    • MD5

      7493d7f8dcbf14dd9145638c2191b4b7

    • SHA1

      ebf08f5931333a967dbbb91a4b68b1fad723a0c3

    • SHA256

      0f9f88e1cd2bef85dfdd2d320466ee80d2d03c4e5d8b195f19dc59bbe64fb594

    • SHA512

      c2f0fbaf51675684a807cad75a00f52990878356b73ce7fccc0b081530b5028ff7cb83fe9a642087a78f9c489f694d76b13c2e24ccb9f3f5636c1cce448491fb

    • SSDEEP

      192:3ZMHJFF/MwWMuJFkj7nuxQO6Ek67mHx+8tg/2dwquGTC3T5XU:3ynKLLCuxXNk67Gx+8tdw8TC3T5k

    Score
    3/10
    behavioral14

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/_pydev_jy_imports_tipper.py

    • Size

      17KB

    • MD5

      298ab68eaee799bcb4f35534bb163697

    • SHA1

      116e3549f9c7cfbd2c3f5808acde925410c3d296

    • SHA256

      dc61cd08302e1a3a748e4c7b70a9ab034dcb1ed2c85cfc9a140008e4ee44672e

    • SHA512

      f7fb6254130a17a5ca65631309326dbe82122c4eea31ea17314d1294b60f4c502a3a73fae4eb48074f740161477b71f047433cc4e66c97e306a7e35c143beb8c

    • SSDEEP

      384:UVu40AOOzRbMzfdWzrd2RznZZV0lSyfKVU0NudRZpAYVmMo:UVu40AOOzRbMzfdWvdWzR0lSyfKVZNuM

    Score
    3/10
    behavioral15

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/_pydev_log.py

    • Size

      579B

    • MD5

      360c39434e6268b7f23d2d245b1c73cc

    • SHA1

      b05a562b70c0ecb7eca5c0ea66b3d7c2d690a0ab

    • SHA256

      3d9836eac109df4d10df69556638ecdc1b89fcf0a5fbb8eeb0c28e98d8d98466

    • SHA512

      5266ce95e7c94badab72a53cf56ea7d5a359ec899aad79210176599b731c44ec7f51a8efc0dceb3c672e35cdee0022e9f444e63583079d5ad3dff2c7bac330f8

    Score
    3/10
    behavioral16

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/_pydev_saved_modules.py

    • Size

      4KB

    • MD5

      59f775440ec377e4d295c431b80ca280

    • SHA1

      1673f0c17e4ae4c22edb264c4db96905f221f420

    • SHA256

      a0072efd82f68c2adb1c1d1f7d031ce3f65f17588183cd99cdfeb7b021d5a0bd

    • SHA512

      7032beb6d43ff996e7814bb5fc1dc803b1f6811d4a9f73aef623435ac9b11ea90d2940aa2ccc28e9b2d597e6e20fb6286c595f8dc647ca9742cc40eabdd9e89b

    • SSDEEP

      96:kcSV7HtQ0be1ONwW8dLdeWuqm9+N9/inlZWhVOX4RiuO6ooOigZcOX3VYOGknOgM:kzVbtjbeneCmsNxinlZcdObpqGyf

    Score
    3/10
    behavioral17

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/_pydev_sys_patch.py

    • Size

      2KB

    • MD5

      f408a9f9c0ae1cb0a441b3503c74c60b

    • SHA1

      10959cac0eef295855b7260f533da8f9f3c33617

    • SHA256

      5d371338742b81a9be784e31607281c3eff65e9cbf69578d138b500b6421bb26

    • SHA512

      1e4c28fcb7e5c391fed0319faa9dfa6dd3e3a9dae4a2eed1fcb5418e2e5c012f58b85ba1d3b344c5387f98a4d4ba4805d29f95250b90b60e958aaa2dcd14bc8b

    Score
    3/10
    behavioral18

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/_pydev_tipper_common.py

    • Size

      1KB

    • MD5

      0318c0b88686accb12e76dee35b22ad8

    • SHA1

      f1e91132f3020edb2ec1f41b12d743661924389c

    • SHA256

      b92aada214d65c977b01a5dde74c45d5582470de1a09d0110aed6336af6673d1

    • SHA512

      bd0bacd9774ca8c289d9aa223091b79b80ebbcacbb8baa78f37b86aeba3c75509c77cdc2c8801436b846be4ebf81e92b19eb590af91ca82e74cd44d2067b550c

    Score
    3/10
    behavioral19

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/fsnotify/__init__.py

    • Size

      12KB

    • MD5

      7cdd1dfd6917850f35d8c5ef7091b8b9

    • SHA1

      7dfbbc615cd8f67ddb9f34f8f02b01df8c901644

    • SHA256

      9d7a5f1bfc8d53e781627eb0bd3487b908e3ae6f237d08f34de7f97e14ff39e3

    • SHA512

      8c057b4c1394843734380cb24fb02e034f7caee478fd09fbfe7c4b080d4f70714af52fd29d8b430d09521ccfdc3ca0b79cb92146ffbc5b8e95f9b686236b6131

    • SSDEEP

      192:X3NaV2/BpqFih57PgYNKFttHsKbVJZ02veUpGpoey8:nUVmqw57PGxsOVJZJbIoeV

    Score
    3/10
    behavioral20

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/pydev_console_utils.py

    • Size

      23KB

    • MD5

      28fa707038e690bf96d0088ad218e000

    • SHA1

      086c78b0b7bfb5148a2bad1f20861028ff39c23e

    • SHA256

      ca9c14133c841d148dd97aef1af6b39622c40f3036f906b5c7cfbbf77be02621

    • SHA512

      9bd538202dd7f62e7514c76c924a69a9f92ec8866018c076cbc496ffaab6c80033397de5763934c37aeced39805dfdc7c86bab28139ee2be25e70dabd1b9ceef

    • SSDEEP

      192:AKUSN9czAVaGpTrMUu62eypBTIr4U21/ebec+VS/mXn0hGB+/ERMz8Y9nbzBzzJH:ArTsVZaDedbs3MzL9nbzBci45u

    Score
    3/10
    behavioral21

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/pydev_import_hook.py

    • Size

      1KB

    • MD5

      028bf24f4df60b818cd5aa7845bf4932

    • SHA1

      fb505407e1f69e6794b717c44f2fba2c3c1157bb

    • SHA256

      64105e1dfb22126e51d3a88e4b7c734cccda776e4cccbfc49f8dd5af7c64369b

    • SHA512

      87d7fa1d34703ad95c4eb064d206eb80e4958d236435d451edf8db049658a65c1ef5d262323497ae9d85b3ada2f3d4932c697ba35ed3e8eb9601af595b71a46f

    Score
    3/10
    behavioral22

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/pydev_imports.py

    • Size

      417B

    • MD5

      42acf500823d8b2d364ee01876d8ff68

    • SHA1

      d1c59735ee801b58e5be5a34e04380f3cd83c17d

    • SHA256

      0f6c36dda142193bca3fd33cb7d1503e02dd8c92fe54f5fd0e95bcdc5b03d540

    • SHA512

      084788ababb79e14d825e60e3e2b6fd6cbbf16055e065148267082ca951ac055ace90060401f3e9c5bed602a1c3f26fb3dc32819128b03667088674d43c24ada

    Score
    3/10
    behavioral23

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/pydev_ipython_console.py

    • Size

      3KB

    • MD5

      32e3b0a091036e0e0f7bc0ec6de3c6f0

    • SHA1

      454080505c7fbf33403873f16a057e931cd33900

    • SHA256

      2814e2385afcf8c5ef3d1f3b93009f02785e717c6ed0a78e1b404b0517a9306b

    • SHA512

      7842a004d23f2fdef003f6218961d720790277b67705329f60475ba81dd09580dbf984dd661ddc813bef9ae2bc9c73a129270195adc380821411d7ef4a5e9d18

    Score
    3/10
    behavioral24

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/pydev_ipython_console_011.py

    • Size

      21KB

    • MD5

      19b05d54df589a338084793cb681f67b

    • SHA1

      a1a458b54a39fed7c0ee1c9a9ba58560606df83b

    • SHA256

      7b80a6685f53a04831831a12b9a175d5aea52dadfe26bc8db76ecbaae8b37236

    • SHA512

      ecc68c04dcbe2c916e26d50f82b8b2cf40dc340bc234a716d32a5bbf6a06783d0a40851cd8c8795ce12b348a3640f4f619630c2bc690c56d2bd00466d0bcd706

    • SSDEEP

      384:/G6frJ5nqRN/qC4LCj2xfLd/QjQPaPtsbExAZ/FnWls6p/8fXlRs:+8qRiLR6jArEx2/Fn8s6ViDs

    Score
    3/10
    behavioral25

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/pydev_is_thread_alive.py

    • Size

      719B

    • MD5

      e045357f336f1b00b55971ff23314b85

    • SHA1

      2888dd8bff14c77873530b66a6414cf91a876ea1

    • SHA256

      6c52a7a892a9449d46135f29d68069df9d085c94c5d9ee160c2d791bbef94f11

    • SHA512

      ab8fd7e963886dcc2a0399af693e2d6aa58400d972bc1843c953104560c04caa7700f412f00b028226357272a2e85b79b474f37e243af3d290f71f4321699643

    Score
    3/10
    behavioral26

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/pydev_localhost.py

    • Size

      2KB

    • MD5

      21b8fb94e1d899408c02b3b66b4aff75

    • SHA1

      2006d8c8e1608caf99249353c7d0924cbde5e27a

    • SHA256

      78cc72aa178180c3d4d25fd50f29ca2ef44ef6ff0f85fe4ed38a0f13a2716b76

    • SHA512

      364c7ab72a4077f68104e224415e1f9920650d5d0775de8b982c8bd4a663bb80046f14991c752971169c777697b8842888ec74419d8d171826782a4bb0c6ee16

    Score
    3/10
    behavioral27

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/pydev_log.py

    • Size

      9KB

    • MD5

      ccf7ca1309b14f9105195105a9d395e9

    • SHA1

      a39f772bbd9477ec756af11149d2f06f9ed30b2d

    • SHA256

      5a5daed8758231275dae4d5aeaed48d77f3017fb21b10108131ca1b9fe81dd83

    • SHA512

      b1967e1efd850fac952492106fe42013e73b23ecd03b3004738f19447456c2a012ba06b424a472cc9a7ef9304ec4874664b76464c76e208ecddf53d489b002d4

    • SSDEEP

      96:WgF27JH8UJQDzTbmMyR/qlCSXu3OVMYhB+VTv8YxCzi5RFNYy/aENYy/wpYTht:FA7BXQ1Q/YCNd5Yy/HNYy/r

    Score
    3/10
    behavioral28

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/pydev_monkey.py

    • Size

      42KB

    • MD5

      7d1a0ffaf677b46d4ece09e99cf829a0

    • SHA1

      1f3a5587d0389576f4c1191fdbe954574f4d8e4e

    • SHA256

      05e790dac5df6f2b8a911f4e0fcb1154f8acd5255c849c07c82894fbc01ad05b

    • SHA512

      08a140eafc49db7351552eed023a383afc0a1680e238137a1952812377911647666b1201049c85692f1730255fa32bdf4d687e36aef0fa925166b278cd2be2eb

    • SSDEEP

      768:3YpxkO+nTAj+DZ8H/t8/OZEFhuOEnR5pLjtQ+/gnPd+1BqV03ciXBWTMhP7xPaxX:35tnTAU/OohuOuRvlsiTpcx

    Score
    3/10
    behavioral29

    • Target

      extension/pythonFiles/lib/python/debugpy/_vendored/pydevd/_pydev_bundle/pydev_monkey_qt.py

    • Size

      7KB

    • MD5

      8396bc91f0e89bfc2f935365c6a8c638

    • SHA1

      4ce70148e5c81b6b7c28eb1918caef2ed5add9d8

    • SHA256

      7f8db8a97327b8999f56a8ce9756ba66b7e2ffeabd38822687ae6f87d128d549

    • SHA512

      1018f2640c3c2e3b186670fc039cb0d018041b8bfac78bf4d7832ff20f3509fe3b1f3a9a7e36992c24e4fb0274bed2fc33ca22c0fcb046ddfefd0f5ecb03d0ed

    • SSDEEP

      192:dYUlNfZos/n9MHnnXHRl5szzsFOG5SXJ1mEUAYIZ0GNF2rQrXYppRZno3:aiNfZos/n9MHnnXHRl5szzsFOGUXjkAR

    Score
    3/10
    behavioral30

    • Target

      extension/resources/light/discovering-tests.svg

    • Size

      585B

    • MD5

      c24e7a7847c65b5dacdbbb75b626deb6

    • SHA1

      417a00e9f0741806f5da5588d4b7afcbf094eff0

    • SHA256

      4571e28b00310637b1463876fcde25404c910c35b6991e0717c32cf2f365e0b3

    • SHA512

      36014734c5271dfed3a5e6a686b19897a2e97d6c1818fefd653b6472ef6f6a165a9e07aa6e03e2fc3461fefe260d928769a75e5de8d20b1b1db8492f0cfe8a8f

    Score
    1/10
    behavioral31

    • Target

      PotSplash-BETA/Startup/PotSplash.exe

    • Size

      49.6MB

    • MD5

      bb7da2abf7e5815a3d1a69d3dcdff4cd

    • SHA1

      5a6e56a9a3ebe5357345890b4edf6652a8c9b53c

    • SHA256

      fcb30e73c69fdb48a1f88ecc7d4f6c461a51ba225c2ed4f1ad521c73748a3cd6

    • SHA512

      4ea96b6f8793e3cad54eb0f21d7a1daa31904965afde48f2bc4a030f5f4cdcc3b54a3e372d54a0accab37e711e716f532641d829ea0eee083f8c97708045194c

    • SSDEEP

      786432:lC0Av8SYxVFy1DjzOF+Tc8zAackA3f8ESYSfGmiQqPc7Z6rWRNwFHHV+WrwCTl/r:o0AESEe+qAaTUfvI9Z7ASwxzkCcrs7

    Score
    10/10
    lummaspywarestealer

    • Lumma Stealer

      An infostealer written in C++ first seen in August 2022.

      stealerlumma

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral32

MITRE ATT&CK Enterprise v6

Tasks