Overview

overview

3

Static

static

1

tmp/.org.c...f.puff

windows7-x64

3

tmp/.org.c...f.puff

windows10-2004-x64

3

tmp/.org.c...5.puff

windows7-x64

3

tmp/.org.c...5.puff

windows10-2004-x64

3

tmp/latte-...d.lock

windows7-x64

3

tmp/latte-...d.lock

windows10-2004-x64

3

tmp/latted...colors

windows7-x64

3

tmp/latted...colors

windows10-2004-x64

3

tmp/latted...colors

windows7-x64

3

tmp/latted...colors

windows10-2004-x64

3

tmp/new.schema

windows7-x64

3

tmp/new.schema

windows10-2004-x64

3

tmp/old.schema

windows7-x64

3

tmp/old.schema

windows10-2004-x64

3

tmp/packag...pdates

windows7-x64

1

tmp/packag...pdates

windows10-2004-x64

1

tmp/pip/_v...rt.pem

windows7-x64

3

tmp/pip/_v...rt.pem

windows10-2004-x64

3

tmp/v8-com...s.blob

windows7-x64

3

tmp/v8-com...s.blob

windows10-2004-x64

3

tmp/v8-com...js.map

windows7-x64

3

tmp/v8-com...js.map

windows10-2004-x64

3

tmp/v8-com...s.blob

windows7-x64

3

tmp/v8-com...s.blob

windows10-2004-x64

3

tmp/v8-com...js.map

windows7-x64

3

tmp/v8-com...js.map

windows10-2004-x64

3

tmp/v8-com...s.blob

windows7-x64

3

tmp/v8-com...s.blob

windows10-2004-x64

3

tmp/v8-com...js.map

windows7-x64

3

tmp/v8-com...js.map

windows10-2004-x64

3

tmp/xauth_CDXAAy

windows7-x64

1

tmp/xauth_CDXAAy

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp.7z

  • Size

    1.1MB

  • Sample

    230829-xb5h5shh3x

  • MD5

    c29206268cd4342f6d722d4edaa555ed

  • SHA1

    345d2f744174ca386d5b5d48d601b95ba5e9679e

  • SHA256

    843d5892ae16569f2b69899a9b344c4d8a36d441591006c9075c497a3bf7af20

  • SHA512

    5536da576a7e8472e360f0c4265e0b62a05292fea81825dde43cf86044cec5185f4d26402f68f02f6c1272c93ff248786f06b4eb689098f55d0c3b543770ea4e

  • SSDEEP

    24576:dhevdzm4QjMUUvrBsvEsqqSMrYLz3zbwOpecdwKIxuLgSkg:dh/vMxv6PLsjzbtoCwlEgw

Score
3/10

Malware Config

Targets

    • Target

      tmp/.org.chromium.Chromium.CIiP1D/4be5c8194aa6b4dce9271bdda525d0d8ba9b60b9fbee2b6ab9d7191bcf40deef.puff

    • Size

      5KB

    • MD5

      279269dc030859a448f931557ea5db7d

    • SHA1

      97065106a598bb35a35df78d965fa684bd42a74d

    • SHA256

      4be5c8194aa6b4dce9271bdda525d0d8ba9b60b9fbee2b6ab9d7191bcf40deef

    • SHA512

      469e10145998e26e4dceac10affc0d839e0733a7ce59b6738cae02500f0b59077cad527b5dd701e612226a7b1a3c400d0ee2b3a134cde16a71a87eeca723bdcf

    • SSDEEP

      96:fcdV0amS1BcZdAiRhO6hUBxikoWr/km1E2fW73ZWKlLMm4xYFv2QPuBGXmZig:Ud2amu2vXh2xiko2/M2fW70GTv7GB4mJ

    Score
    3/10
    behavioral1behavioral2

    • Target

      tmp/.org.chromium.Chromium.YAQUpl/afdc25a3e878826efbf18a52aec0c7f46d621ad17c28722054bc30d1607e1215.puff

    • Size

      12KB

    • MD5

      fe602b04d541015f9d62d4d3ef165ce2

    • SHA1

      b8f2f63b7408d2c1ce3d133a2ee2b99def2f45b2

    • SHA256

      afdc25a3e878826efbf18a52aec0c7f46d621ad17c28722054bc30d1607e1215

    • SHA512

      fb26fef1195837123198e6ce1e0a405ae30a7e60bf6a43bb09faec9d030e11f08ac461858374240c5bd1de1bd8a40454eecb3c8fa92de207a6114fd3b588e0ec

    • SSDEEP

      192:Lh7U7Icc/zTWAgjI8YqT0qagCKdCQA087lzUIKcOEPIJlZCoCqK8:Lh7UscogLYqwLgVdbA0YlfnSloa

    Score
    3/10
    behavioral3behavioral4

    • Target

      tmp/latte-dock.mrkd.lock

    • Size

      96B

    • MD5

      fc32323fc656df4c929f711088496048

    • SHA1

      c08d09b850b7104446409728c8de49785dcc6260

    • SHA256

      55f6ed7df98e524bb70beff4cf8943128aa8678ff8432029e41b54e61045307c

    • SHA512

      1c3f0538fc15844c476e6543217156295aef5479170f2266b48a8b9971248f313e691bc8480935829ae961e1b58455daacffd246c7509feed0454c6daaa715bd

    Score
    3/10
    behavioral5behavioral6

    • Target

      tmp/lattedock-mvHtAR/default.colors

    • Size

      3KB

    • MD5

      cf9ca76de170dd4d78aef8dfa7e6ab16

    • SHA1

      ba4301175abb8f36d803d87a74b663b57d97d815

    • SHA256

      51cb3fc0f310bd5995c53501f9c05f25e8c8fa13d731f566798f0bb22036ad0d

    • SHA512

      9f3bd8f9ec31fc41afaf88a2daa73ce9e3eef6ec5aec2753a54037d2481fd6113abb5d8829aa6670e0af67d77bdbe09da85f626ede19fb76177432161f0cf88e

    Score
    3/10
    behavioral7behavioral8

    • Target

      tmp/lattedock-mvHtAR/reversed.colors

    • Size

      3KB

    • MD5

      6bd45ac2164098df0998dc719ea9a656

    • SHA1

      44698fa61bfa1a670312f1d278899ba3aaed75bc

    • SHA256

      e7ac2d73cbbd251990b2b9b1710843219574c993e7945365c6acb1e0c393dcdb

    • SHA512

      5e4fcd916a7d369f50487754fa1e11a0f17f323f6178ada736512628c886ad52f846b6f0f8cb42735754087f448e97ad77d818483a5f54acff367c7974a55637

    Score
    3/10
    behavioral10behavioral9

    • Target

      tmp/new.schema

    • Size

      26KB

    • MD5

      e02c98bc8c57de5bf4ea21be47ea645c

    • SHA1

      9103fd70bc9eb39382507aae82c8c04d641fe166

    • SHA256

      ca69296031d73576f5bba6b441ca3e05a388299e4e8e7e33db0299ea499a429f

    • SHA512

      39f743abe7a7c4eeffd5a5572f109e288f4a8f5ea2528c32409d6087e3fe63689def68246de3ac8acfdaaf024c292a8bb077dda8f2e505bf293eacb3069622bd

    • SSDEEP

      192:USmNuhGcUti6KtEYGjGUtHixBPHm1sqw44Clqi+1uiqRkCqD0EmoGpKZiteClOlb:UhNzbST6xtlpAyowAU2l

    Score
    3/10
    behavioral11behavioral12

    • Target

      tmp/old.schema

    • Size

      26KB

    • MD5

      e02c98bc8c57de5bf4ea21be47ea645c

    • SHA1

      9103fd70bc9eb39382507aae82c8c04d641fe166

    • SHA256

      ca69296031d73576f5bba6b441ca3e05a388299e4e8e7e33db0299ea499a429f

    • SHA512

      39f743abe7a7c4eeffd5a5572f109e288f4a8f5ea2528c32409d6087e3fe63689def68246de3ac8acfdaaf024c292a8bb077dda8f2e505bf293eacb3069622bd

    • SSDEEP

      192:USmNuhGcUti6KtEYGjGUtHixBPHm1sqw44Clqi+1uiqRkCqD0EmoGpKZiteClOlb:UhNzbST6xtlpAyowAU2l

    Score
    3/10
    behavioral13behavioral14

    • Target

      tmp/packagekit-alpm-updates

    • Size

      1B

    • MD5

      cfcd208495d565ef66e7dff9f98764da

    • SHA1

      b6589fc6ab0dc82cf12099d1c2d40ab994e8410c

    • SHA256

      5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

    • SHA512

      31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99

    Score
    1/10
    behavioral15behavioral16

    • Target

      tmp/pip/_vendor/certifi/cacert.pem

    • Size

      275KB

    • MD5

      712a0c9e3337edc7f4c6c36a67727866

    • SHA1

      cd0cc7f28f7c8aefea6f54f392c7bd68acacf572

    • SHA256

      53b8854f8fe7fbb5c27c7a5cf08e3a69de641ee1af0d279d95ad9f75b428414a

    • SHA512

      2183f4eaf351e500054039eecabf76df00c1fd66d777ac7cffab841bcbf6a60673d138c550b6e73bc80c5c7a162f399e4a6a62b120841df2902313cb747b14c6

    • SSDEEP

      6144:f3fLXdA7U58f9ZKlWm5plXqXCRrcMBHADwYCuMslip:f3TS7xZa5LACRrcMOb8

    Score
    3/10
    behavioral17behavioral18

    • Target

      tmp/v8-compile-cache-1000/11.3.244.8-node.10/zShomezSmrkdzS.cachezSnodezScorepackzSyarnzS1.22.19zSbinzSyarn.js.BLOB

    • Size

      2.1MB

    • MD5

      6d0eb9a6ba3f31a0ae27a98c72286dd8

    • SHA1

      263253b7854a18264f639d71f03d7d56ad44b3cb

    • SHA256

      f37cce8f970d19468c65d9c95d4decd5a8497289b44aa9978715487dfcc422f9

    • SHA512

      5073b7bc24b7075769737e9bf25212b060b911ee0a40ae839e7b9e186d919eed828958725a13b1d6615b6933ded8fa26c341e742400f05dfd8dad65db68bbeba

    • SSDEEP

      49152:RDicBPJEEfhOhgA0vJxK1SufJCTVI+6kV1zK4htq2fxtAOi:RDp9G4Kn

    Score
    3/10
    behavioral19behavioral20

    • Target

      tmp/v8-compile-cache-1000/11.3.244.8-node.10/zShomezSmrkdzS.cachezSnodezScorepackzSyarnzS1.22.19zSbinzSyarn.js.MAP

    • Size

      114B

    • MD5

      cba138fedfa99d447f0f59de928963ea

    • SHA1

      f2ec26094ce33c45f4981d925f6487bc558bd09b

    • SHA256

      796e0058bccfa1a253c402824a01daa3d4591da7c48c3761c1715ec76e956b45

    • SHA512

      c2e24c6baf1b34c582de69a82e8587797b45e9402eb184e47f4ec147be9161c1ac40275faa9fe4db72349908b810868689ecb5bae5b464ed01724a6e093bcc14

    Score
    3/10
    behavioral21behavioral22

    • Target

      tmp/v8-compile-cache-1000/11.3.244.8-node.10/zSusrzSlibzSnode_moduleszScorepackzSdistzSpnpm.js.BLOB

    • Size

      851KB

    • MD5

      4398e5da74c825f958cadabb3da3f92f

    • SHA1

      0a8ee6fef193481b5ba5971f4329118487fe23c9

    • SHA256

      0cfb4f1b3bc28d13b3ea83f6fef6ec1834e22bc05a04b0ad7719aeece5a1dfb5

    • SHA512

      d894527732fedbc8e52cfd7a1d6ba1fb22b7b7e128aecceab3ce3033d5b03ae29aef6a00c84a9fca1d4dcefa01663728292f8be84030a3cf261813bb3f5af2e7

    • SSDEEP

      12288:CwSeF7NJWOKbfM1+ZNW9ZPxetdU4Ni1+CCcYn:jx4OKbf2+NW9ZQtDiScYn

    Score
    3/10
    behavioral23behavioral24

    • Target

      tmp/v8-compile-cache-1000/11.3.244.8-node.10/zSusrzSlibzSnode_moduleszScorepackzSdistzSpnpm.js.MAP

    • Size

      229B

    • MD5

      6ffe5990ee52a759022cf3e99e4595a7

    • SHA1

      dfa7ea8d52675af49a56a3f66a4203b39970ced8

    • SHA256

      6e4c7d0f7510c8c2938dbbc014edef3100b076a7076fbd79487d015368150960

    • SHA512

      a2add73fd79a33f087a7892178a5bb4a2e77a6d1c380e37cc07a89380ca9de6f9b5c4fad7522ce8571990e1869ad633e7d36b578cfce3a713fc4b33c44ed19a7

    Score
    3/10
    behavioral25behavioral26

    • Target

      tmp/v8-compile-cache-1000/11.3.244.8-node.10/zSusrzSlibzSnode_moduleszScorepackzSdistzSyarn.js.BLOB

    • Size

      4KB

    • MD5

      100fa352a622b0513559bc01fb1f7b10

    • SHA1

      8d593ed98a682fbceed6033f3a31d0d3c3d6cff2

    • SHA256

      3468378184af08ad9f05b204b07efbeb5e6b064d3ade87f5e163cda6b57a251e

    • SHA512

      c9d731fae0b83c4276fba4b00ed2b0eaf12119a53074fcdc4f484b23696592a2003a2263a05620b67a1a7ad9e9de083be663080cbc0e12a78f49da240f89f6af

    • SSDEEP

      96:FsVd0qJtFUevEag2vGZXRSoLtvrLzG+Y/bohXp82vDEjXfI:0JtFVGZXRSohzLzG+Cbob48

    Score
    3/10
    behavioral27behavioral28

    • Target

      tmp/v8-compile-cache-1000/11.3.244.8-node.10/zSusrzSlibzSnode_moduleszScorepackzSdistzSyarn.js.MAP

    • Size

      238B

    • MD5

      982b105c9da69be100c68cf3331f4b95

    • SHA1

      db7e9b3e5f7c2daee3a7675564c1cb7dec8bb584

    • SHA256

      f0c298c3d1718d366c4a64ba91d85753d735f6465d300eccc94c81089ae345ff

    • SHA512

      3bc03910266e600d6eb6039551d65f0ed6d5c32d92a8caf7a671657a36222484de9805ec6f27624a713f087e07ed1c194a5fe110e09bdae4f2b1a42c5761b896

    Score
    3/10
    behavioral29behavioral30

    • Target

      tmp/xauth_CDXAAy

    • Size

      99B

    • MD5

      09bdbd1b10351e38cceaa48b21b7eccb

    • SHA1

      345c8ef40379837cc408e844dc25200bf2f89e29

    • SHA256

      8004acfcbd3106deacd0ca5bfe38bd786677a4563bcf06614f3777f062c8042d

    • SHA512

      f469be82e876164a96de36c96a097cad3ebc116c247f49bb2ec4561acd90e5ff681bf178b05dcd12e1f1d28560a0285062f49b4afac9efa2e1ec6576256e79de

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks