80136d68fa257477d14036bc98826054bb5cac06d6fd9e79dc590cc847c8ba10

Sharing

Copy URL

Twitter E-mail

General

Target

SirHurt V4.zip
Size

33.4MB
Sample

230422-hqjgwsdd25
MD5

8ea3c925f8592a5e0e23feeadec0e143
SHA1

024c61f22ea060cbbb3c752f68898084d7c58b48
SHA256

80136d68fa257477d14036bc98826054bb5cac06d6fd9e79dc590cc847c8ba10
SHA512

a998a99e08bdc258e5073e3b15c9de43e96ae7523785748987811d16745bd5b362a614874067d2aa2930e0d7815cfd8741b32b26fc785ba88027bad99cfbb3cf
SSDEEP

786432:XG2+4gguUDyEszzio0YdXbruXLLfvKXNLbC05x+IQhdsL+:29V//bbEWN33xMdsS

Score

7^/10

macos themida

Malware Config

Targets

- Target
  
  SirHurt V4.zip
- Size
  
  33.4MB
- MD5
  
  8ea3c925f8592a5e0e23feeadec0e143
- SHA1
  
  024c61f22ea060cbbb3c752f68898084d7c58b48
- SHA256
  
  80136d68fa257477d14036bc98826054bb5cac06d6fd9e79dc590cc847c8ba10
- SHA512
  
  a998a99e08bdc258e5073e3b15c9de43e96ae7523785748987811d16745bd5b362a614874067d2aa2930e0d7815cfd8741b32b26fc785ba88027bad99cfbb3cf
- SSDEEP
  
  786432:XG2+4gguUDyEszzio0YdXbruXLLfvKXNLbC05x+IQhdsL+:29V//bbEWN33xMdsS
Score

1^/10
behavioral1
- Target
  
  API.html
- Size
  
  25KB
- MD5
  
  94f0390d7b242b45b61bdc41514086dd
- SHA1
  
  5cc880c4d443163982bda7f36244a66953f9d4e1
- SHA256
  
  27436d4b55ad2977fa88619e5c9e1f6609d84f986051fa839f35033c95e219fa
- SHA512
  
  8e5ebbb0d766769f88b27ad0464a651d5a7b21218fcc42d1d52a9ebe16d59974c0e6feebbd9e33bd33c262d6f85043f3c42cc1468e12bebb46c5a8851dbe076b
- SSDEEP
  
  192:GDZMAkXIwfk9ShgsXnBLbyZ9KkxBmZtaZUjnZ7QeESv:Gsk9SyABLw2tEe
Score

1^/10
behavioral2
- Target
  
  DCJ.dll
- Size
  
  2.4MB
- MD5
  
  14a7278440ee6715e87fda45fc4e0732
- SHA1
  
  046e06f641747e32cc76a2ce1868d9f72f5cb979
- SHA256
  
  5a39535ee16c1e225faa78d21ba20130f48b98a0f473b03d6a7e27007b1b0597
- SHA512
  
  0bb721460e0f2ffd2dd0e9551d82f27f2a616f8e92e0b0b6bb650be3bc9e20bc73687794fea412eb553b3a15445c89c6c31f3c74dacc1357b4a3c6159daaf252
- SSDEEP
  
  49152:LwQauKv9CGCS1d4iD6THGe8LE/ANp+kMJ/PZyW7UCKfFVA:LpFLTHGTLEo/+kMdZ9gCKPA
Score

1^/10
behavioral3
- Target
  
  SirHurt V4 Bootstrapper.exe
- Size
  
  3.4MB
- MD5
  
  3282cbe6fd2811c4b7d57063e5a52bc1
- SHA1
  
  a0b62b03d1f8124dfc8ebd594b9a5db1b15da210
- SHA256
  
  1a75dbcfd8b465ec27738ce35103ae32814d9fe3bd7364940b955d58b75887a3
- SHA512
  
  d0bce9dee648c177e994c3157556b1af540703738dc8a1987e3381f58ded7ed8512e1ebdd13d8e1ec028fdeb964d500526bde58a3fd86e3a23dbded39c0fd721
- SSDEEP
  
  98304:VuqCRYZ9IcAkcGAFGfIUg6aqNNqLyJuG8Xqn5Q6fnFBRj:VuqCRsgkc+fIf6X8rfk66/t
Score

1^/10
behavioral4
- Target
  
  SirHurt V4.exe
- Size
  
  6.9MB
- MD5
  
  9468ee14458c641df58cc7cee92e7719
- SHA1
  
  d2586659aebfbe2d873bba54ba29bd7920c72994
- SHA256
  
  dedeceb8284ebc184f1a02840c36140986defef77be965f8e5fd78b8e47a25a5
- SHA512
  
  bab5a67ffe9b133f0f84c1082193ada89873463d6aac5f001d303edfb0c58a4cf9207c24e8594ac18a843003d49164ded57413b2acc5640192f651650f7d3ccf
- SSDEEP
  
  196608:WDlnTW4qWp/q4O6bTLICybW/RiuDIuUf7EhLTrF6f6:2dTFqWpd7LXJzDHU/6
Score

1^/10
behavioral5
- Target
  
  SirHurt V4_New.exe
- Size
  
  11.6MB
- MD5
  
  26d8738be730104fd57843f2a15b6874
- SHA1
  
  78121524c17246003e6cc6f2c32b317a46d4dfa0
- SHA256
  
  9fa367c25c64de24a14d0ecd1f86e69613f6c662c40f0598779d99b3c62eacbd
- SHA512
  
  695d92987c4df3fcc84c458fd8bfc457fcb092d86757c2259d44ff6508ce631c1fed4b584f299e920a6b8754cdff94e2e14bd48395b8f88ce417c7c6c6a6ccd7
- SSDEEP
  
  196608:jTdkI5D5mSUTz9aJjq+MPY2lEyKbIFv8mDqiFW5qAR1t44FutP9wCFiw7uFH:VbLmSefa2hF0mHF0xR44FuV9wCinF
Score

1^/10
behavioral6
- Target
  
  SirHurt.dll
- Size
  
  4.0MB
- MD5
  
  0da375ef809a4aaab15d1ab9fa6c49a0
- SHA1
  
  a8f4f83acd67b86b06f3bd27b978dc43e475b871
- SHA256
  
  b83998ae232c47e0d02997a975b053d1205a78a4216c3dc24fb806558dc53e74
- SHA512
  
  4268d7a5f08d1aa63580776c70d1778426815d452ad1b146c8bc2a21f122be4404dd10ec96d041a695168da9ae34977859e9a49daf97a89ff1bedc40013e2b20
- SSDEEP
  
  98304:wYkaMNa54Le9VvvvngU0944ITMfLbBqWVu1wG2WImHfUS5uk1:STNaCLuVfgUF4i2b0yaImHkk1
Score

1^/10
behavioral7
- Target
  
  SirHurtACI.dll
- Size
  
  2.3MB
- MD5
  
  d20ed1533b714c2d10cac92a85317b0b
- SHA1
  
  f5af02a709e72cf72678574e34c0b38937f265f1
- SHA256
  
  ab3402afdb62ef5aefa8b637d301be2a4b0247d226fc36fdc82dc93c489a018b
- SHA512
  
  08cdab6dae326c76993c1b71defb1bbf02bb7afb2e66423276e41eeac1bcd09b9b41b246810aaa8c630e014654d84b3b4e994b8747d469caec7cb74a5cc20e43
- SSDEEP
  
  49152:aGam9CVOru/uCp+sCTxv1DIFboxE0IjupGleT:YVVCfsCzDUbJ9juqeT
Score

1^/10
behavioral8
- Target
  
  SirHurtInjector.dll
- Size
  
  68KB
- MD5
  
  7ee79efd252a5b5a0f81ea5f9c010b9c
- SHA1
  
  6c22a2a893ce05ddaea8793e7a43e38eb6d0ae6a
- SHA256
  
  9128b88d1cb65ae0bfcfb5930be1923b95c786c1da598ca76aef08ea052ec4b8
- SHA512
  
  498505e7570d2e15d13c3885c2327ba223834e3e64e44b05e8e2a1d0f10662aa2886cdda5cba26b20cc7fe740d19973e7e4176e0b71364086d6fbda676f2c07c
- SSDEEP
  
  1536:n/FHh1+Y9Z9PXACf8RrYK1yAZdqnq7fuaqrxvfZzIr8C34ZOT:n/f1Ja9RsK1unDaqrxZa8CI8
Score

1^/10
behavioral9
- Target
  
  Themes/DCJ.dll
- Size
  
  17KB
- MD5
  
  5ab1717c60ff2f75303376f1c470068f
- SHA1
  
  7584983562faa203b35f15e6c518dc6f938d9092
- SHA256
  
  15c9970e8e6e8ed88051f27ff54e37242afad8c40be610a4dd19c95f836cae45
- SHA512
  
  ad7572e2a266afbffb158caf805b61da8b4d35e0f56613e6f86de484b179928871415fd7b54c0e684c67a69dd0bac62970bd95958865ee9628b8dc1ebafdfd56
- SSDEEP
  
  384:6EaSbFjnvHgDC8yzmtf4aqFipkOnPy5V41ex:P7bdPECeR4aqFckBm1e
Score

1^/10
behavioral10
- Target
  
  Themes/SirHurt.dll
- Size
  
  2.5MB
- MD5
  
  983a30a8c9b37c047b3234a6e7fa42fd
- SHA1
  
  1e38cbd99138be272e42fdf8e991a8d0749a0ed3
- SHA256
  
  96f0eef8c3a82c993ecf1c4babe1108d29f4be8bb465effc1d8e517a82b117a8
- SHA512
  
  c7c5ba592f7a9376a6dee75196541614a04d9a30fbfc21643e7b0553e5894c9e3a3fb31256c08722c3bb69b1e5ef831a4909e960bca89317015de1b071d3a476
- SSDEEP
  
  49152:xmSJzniW2Rrry5/lCbAmwA/6EYECZ3ith74/8v3oD1:TziW2RXyZlCEmCEYECwI8v
Score

1^/10
behavioral11
- Target
  
  Themes/SirHurtInjector.dll
- Size
  
  2.2MB
- MD5
  
  0fe12dbcf0816399ec3963010cabe898
- SHA1
  
  0c7786efb565321c5b8bffaa2650d421aef57bc6
- SHA256
  
  9ef5ce9c80b5bb82639eec8799a47e08ba4c44bedcb871d2a005c933b12a14b9
- SHA512
  
  9a19aa6fb4b5764f2c50e9350d093f648dda7e90ac665d918b44ce19a209bc1f4856bb6394b9f42178724896b427616e0fc4038d746a30999b0a46dbf7185a97
- SSDEEP
  
  49152:Yrn7yit169qMJTUdCVSESCeKVzXIdlJRHq4mlNLtgOl3ZgehBEKVWzrj9g:Enm8MJgcmiVIlJRKlJCOoe3EKUj9g
Score

1^/10
behavioral12
- Target
  
  Troubleshooting Guide Read_Me.txt
- Size
  
  2KB
- MD5
  
  f6769bcb4133c3da232aee0892e931ed
- SHA1
  
  35b83f67571bbf40e65725d22ea76481c798c1b8
- SHA256
  
  a6e5869dd256c72b054d06ebd835ae96af7c9cddeb37c4d55c51ecb772b5000f
- SHA512
  
  d6dcdefa2081605ceeea076224a91c4b42e35da192605721f13dd88de573d82f0a65b0c8404b81aa71967a2c66c54a1a205434ad219a21638ab555e5e5ed553d
Score

1^/10
behavioral13
- Target
  
  XInput1_4.dll
- Size
  
  16KB
- MD5
  
  d56b6d972ae1a970e715267dc3f5da8a
- SHA1
  
  459798b0079c6048ea639a2fd62cd2d74e0026a4
- SHA256
  
  05cc245e91db4abc729da55b45a4550c04c43abf2e5dd41e2c6d0de820c563c3
- SHA512
  
  addc0df9f743a288de5143535dff9f03d2f6320495262eb722773365cdfede8eaa2a47afbdbc9c24d0931d907acc52dae5d8f24da9f2723e2228edbb2df0885a
- SSDEEP
  
  384:ROyy3hKizN8ODb+MxspMJpjPvjtiYGeK:RUKO3QMfv5i1e
Score

1^/10
behavioral14
- Target
  
  bin/OpenSans-SemiBold.ttf
- Size
  
  215KB
- MD5
  
  e1c83f9474e0cc1d84a13c6d1ddf3ca5
- SHA1
  
  cae105eeb2f7cdd760601b14f896bf70e9c2684f
- SHA256
  
  b4c2050b25d3d296d5cf58589ca00816dc72df42262c2f629d5c6a984a161aa4
- SHA512
  
  178f074e95d14f6ebbb0b21a7ce9c48dfafd63d132125aaaceb24179a9f536e7c2b638340071326509409301bfc79fec8622838a940fe2f0b95247692499e303
- SSDEEP
  
  6144:gTPF4C9GrdELutgCNktQFvmnoxXTS4uau8:K9f9VSqCNktA+SXfRu8
Score

1^/10
behavioral15
- Target
  
  bin/Script 0.lua
- Size
  
  16B
- MD5
  
  177060013d2239f8b82eff5ff920afa1
- SHA1
  
  987238ed8d458a5aba18866f3c0727faafc8ebb5
- SHA256
  
  43c5705d5d229e5db7b569130e4dda85a161a18abb6546e8a2dc1ba2275945a6
- SHA512
  
  ef6797c9613896ed14d737c7a78de6c5e60ab2f4f7c803f57d0c2b6477dcd8f95fbf181825e3c1946364b7f655482553346c2528e8d902cf7b7fd28daca0d54b
Score

1^/10
behavioral16
- Target
  
  bin/Script 0_0.lua
- Size
  
  47B
- MD5
  
  f3cc074d7cacded0315523ef408d25d5
- SHA1
  
  20c2f12353c21cfce8970cdd87f383d9f47b4b69
- SHA256
  
  7249fc72d2c1f3a2329dad39cbde2f5ce76d60b71f9ca8343bc35f42483f672e
- SHA512
  
  e306eef93f060511cd938f8c94177be6a62da269b82650b5dddab02b8f5ca8d4500f8f077c4e37effc85b1f14205ca05de6153bb604d08398807a05be94287a5
Score

1^/10
behavioral17
- Target
  
  bin/Script 1.lua
- Size
  
  104B
- MD5
  
  25dff40ce251bec325f601d70f699ac0
- SHA1
  
  1c9de5ee70c86eb1548681e8383341d23b0363a5
- SHA256
  
  74234b22c36c38f6fb0d5ef07d6bae3a19bcefb4d40801f10fb43b7cb6d65509
- SHA512
  
  576d5aa9a82253bb7b824012f8a3a22ab8ee6c651313403eefc4a5f33cecf5ef2fd3d2d18563999149bdcd3139848eff036445a3dd5db68987890c3467b4dbdf
Score

1^/10
behavioral18
- Target
  
  bin/Script 2.lua
- Size
  
  57B
- MD5
  
  9d3793a767c932689f6764d6874b61e1
- SHA1
  
  3a392f529123cab14ab98d4e7d0fdb6343163e14
- SHA256
  
  fe40c41c6a3db67fc69c973ed670f7fda48e4cb83d6abe63f4138d00474a554a
- SHA512
  
  fd473c4c3c00f624d2f09fe1055a6da5dea760d289d7aaa633773b250cb1248d24282d7820b9fd475ec9a7d2d596d51ab1f0b79516778a9660688add2c5ea826
Score

1^/10
behavioral19
- Target
  
  bin/extensions/test-extension/extension.lua
- Size
  
  98B
- MD5
  
  77d9aa12906ba270246c12415ce3cbc2
- SHA1
  
  c1b8b926e9578c1c2546c2cb7699df0d09bd6dc0
- SHA256
  
  39b8ae0189d4cbf4cb38c23a209d4adaccfd083655c5e1c1926be73cc1934c79
- SHA512
  
  a6121c716e21c854edbc8b9c07a58a6ed064c17f8e360f783c1d26811a413a77efea8a6bef70b3645ac9e5b9965d837e0ef591aa1f4d59d69b7902c12e3f9f4a
Score

1^/10
behavioral20
- Target
  
  bin/extensions/test-extension/settings.json
- Size
  
  406B
- MD5
  
  715169e4488071d15ad9e0e0dc4d3090
- SHA1
  
  c4f2e179082cf8700bd22987816a54aaad24a299
- SHA256
  
  47e68a01a3001ec151f532d54bfd829b61e322f4ef8c57f404b01c602b04b87d
- SHA512
  
  a64debdc3e25150e47487efccc6ac90070d2c1906be2504226330cbb898ee6f9dfa849e37f0ea1831e0371a36e8a898816ba260e27f8117aadeb135e09b8381a
Score

1^/10
behavioral21
- Target
  
  bin/intellisense.json
- Size
  
  1KB
- MD5
  
  46583b6acc0d03965d1714e5c6067c02
- SHA1
  
  918221f5077cce4a27a743092ca6c74158067dcd
- SHA256
  
  16c7eeb854870b282b90e5179bee3a0bacdd2248ba81527be039a9c25fceefae
- SHA512
  
  f12c92b01c35d838d6c88436fe77ce05583776b85df8b23e5f1b229894aba479db0bc34488ccc1e1a15b2b44b094d5eb6caf4b098a2cd18244e8a78646c4f7bf
Score

1^/10
behavioral22
- Target
  
  bin/schemes/Settings.ini.bak
- Size
  
  819B
- MD5
  
  0c1b55198d8ff77760b8699cff17c5c9
- SHA1
  
  2dfeec0329954f24035699b700df5b368cc4a3a8
- SHA256
  
  96f7a1883f45dbf0faaca0c3f9783c53fcde5e0019e6a09c510a5aeb12148dab
- SHA512
  
  feaaa491aa2e0936d4a5582fd299ce6bac54c29b1a1fa2feda284a7d08e295a9b9f53a301ef3571c1e33515989548e05acc3ea20e1007ed16435516c925203f9
Score

1^/10
behavioral23
- Target
  
  bin/schemes/settings.ini
- Size
  
  740B
- MD5
  
  5a923a39c5ac7622919e8b511b56574c
- SHA1
  
  ef368906b190019f1eb1d3b2be9357d9e95fb5c6
- SHA256
  
  ea25daee61aba7e75840fb79710420f3e5a3891d99c9fb1b5fc368b2534575c9
- SHA512
  
  c68d5774e99b54804fce6f5b87abaabdbef010bdaea6ac80ee3bdfece6cc050e4acc98eeadef06fad4003a972e5cc7f4fb55db1250ee87e37bf8cc93381d68b0
Score

1^/10
behavioral24
- Target
  
  bin/schemes/settings.json
- Size
  
  265B
- MD5
  
  2178350706209167949903f4de6808d2
- SHA1
  
  e55142065abc37cf12c7a943b3a09ecacff9deff
- SHA256
  
  336a4a82bbd8249daaea52dbeefefffb85abff9ad40cb4aee2d6ad390434ef25
- SHA512
  
  1d06e1dda0939773669eea0349b3c4f9afbb689bcda970c19a8a1373cfd1bcb7bd9f1ef6c9c8e5a4c9eb8a85fc45e29fe1f2228f6d91d2a108dbd2825cede880
Score

1^/10
behavioral25
- Target
  
  lua5.1.dll
- Size
  
  164KB
- MD5
  
  24a0d2ef5b931a2a13341a2503b1de80
- SHA1
  
  6201347d1ded92d365126a1225768e11c33ee818
- SHA256
  
  fbbe7ee073d0290ac13c98b92a8405ea04dcc6837b4144889885dd70679e933f
- SHA512
  
  5e06f88bb3920cef40a4941efb3b4d3012edf868cc3042f9dbc1989c76b410b4e2da12c20ae2fbcffe5525b43aeca8875e51167d0ce041864d546fdb2e1fecd2
- SSDEEP
  
  3072:NNm5HplibAYKo4T4d7ZfpfqD6clSBdz15CoVR7Heb59aaES:zmPlibAYKvT8fBv5va99aa
Score

1^/10
behavioral26
- Target
  
  lua51.dll
- Size
  
  10KB
- MD5
  
  6115bbd71b00f7e2970cb785aaa70847
- SHA1
  
  b55603e30b27de402da60f7f53ffbac05c434ab7
- SHA256
  
  f91dc7554d4a222a1d6b5760eb608e44b5c70dee1a7cd26a0ac8778ea2a64f2d
- SHA512
  
  8da4e2fe40f8eeaf0b55f12d06a3cf746c2167b1312af4aa5100dca07a8e729762b12fc9ed29ed94f3eb889a1e76886a92934d1f9e06f680c9b6b13bb677070b
- SSDEEP
  
  192:qn9bwibw7JYkjcyFZNcvqr0Py3v7u7meG1+mlXzI+eN1qyOd8cw/RsT9QwgjbA:qn9ZPvqr0uzu7meYyOd8cqsT9Qwgf
Score

1^/10
behavioral27
- Target
  
  sirh.dat
- Size
  
  10B
- MD5
  
  cbb9aed44b04aa97180e9320f8e4e98e
- SHA1
  
  75d685357c1e203d99b3c1aa1e4b90376a696c70
- SHA256
  
  819c16a473b2f6f0d734c930f197b64eba164baa3360f02e07e41f50a42363e9
- SHA512
  
  d665205c5169c1661dd3571eeb8706a2ff798cf7c74bbf99acb90ff2d253c4cefec6e0d00e7fc65f3a9910468a1a777d6ad0307a438009d4d208078c6fb2f2cf
Score

1^/10
behavioral28

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28