Overview

overview

3

Static

static

3

baby-llama.exe

windows7-x64

1

baby-llama.exe

windows10-2004-x64

1

benchmark.exe

windows7-x64

1

benchmark.exe

windows10-2004-x64

1

convert-ll...ml.exe

windows7-x64

1

convert-ll...ml.exe

windows10-2004-x64

1

embd-input-test.exe

windows7-x64

1

embd-input-test.exe

windows10-2004-x64

1

embedding.exe

windows7-x64

1

embedding.exe

windows10-2004-x64

1

llama-bench.exe

windows7-x64

1

llama-bench.exe

windows10-2004-x64

1

main.exe

windows7-x64

1

main.exe

windows10-2004-x64

1

perplexity.exe

windows7-x64

1

perplexity.exe

windows10-2004-x64

1

q8dot.exe

windows7-x64

1

q8dot.exe

windows10-2004-x64

1

quantize-stats.exe

windows7-x64

1

quantize-stats.exe

windows10-2004-x64

1

quantize.exe

windows7-x64

1

quantize.exe

windows10-2004-x64

1

save-load-state.exe

windows7-x64

1

save-load-state.exe

windows10-2004-x64

1

server.exe

windows7-x64

1

server.exe

windows10-2004-x64

1

simple.exe

windows7-x64

1

simple.exe

windows10-2004-x64

1

test-grad0.exe

windows7-x64

1

test-grad0.exe

windows10-2004-x64

1

test-gramm...er.exe

windows7-x64

1

test-gramm...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e696fbca4795eb850046b99d1f1009bce3051acbc387c1535177a0b7bcddea33

  • Size

    2.6MB

  • Sample

    231011-nnp5jseb39

  • MD5

    396037d1a020eb6997ea029eaaf27edb

  • SHA1

    a7973a3503059661ca6f0e35ddd94b144ef94a0a

  • SHA256

    e696fbca4795eb850046b99d1f1009bce3051acbc387c1535177a0b7bcddea33

  • SHA512

    6d313376485f0192040de4eb709d6cd20007d41e7d43b4171cb6a7010505a2f50c6841a68c8ba148c83e89f406816046893b95ca2e37fb83df3b9056b48fa95f

  • SSDEEP

    49152:lPChGHIsyXKX1Po/4ktO2Bm8swDcdXcyej/V7mQicMzOsp6uowB4qYY:l6hGoQRE4JD9WJ7HkOCz/B4qn

Score
3/10

Malware Config

Targets

    • Target

      baby-llama.exe

    • Size

      288KB

    • MD5

      56c74d090a8052aaac0954d91f9b7ca3

    • SHA1

      1583aff9685b4adda508b8387d09c9bc0e2fe3cf

    • SHA256

      89a0a870ef453aafa797b29f989e83f930e008d4f2c14dac074dbb3bbd34cd83

    • SHA512

      378c5748cf98ba8d3398608d35a40cc93f76302034de60d80b9e1af2aca98bbb1d2060d3af8e9cd71d37c93f5e5297718587672578d4f508cc90e6d11f89bc37

    • SSDEEP

      6144:xFdXa3rhMmalm0V5tWYF/PRLTSkW5nyZVwNbd+4IXKUPFO3ZiDXTKuCoempM:X9a3rhMmalm0V5t7F/PRLTSkW5/w3XRk

    Score
    1/10
    behavioral1behavioral2

    • Target

      benchmark.exe

    • Size

      230KB

    • MD5

      f7affc826261966fbc5aecdba2584a3b

    • SHA1

      da929a47df25f2f23b1dad77912b0764b9fd862d

    • SHA256

      78e28815f5d677261ecb80e757b1995565c7b61e04e055ea2b846cb572ce81ed

    • SHA512

      e774769a4d062bfceec5aebe554edb2c908bf5530952ce05cac6f86a2b3639425369ec4898ed984557a379e8f9980727fc466c2781d1752b59ea3e57a75ad29a

    • SSDEEP

      6144:7lrWahwjwU603b51MYv22ZLKxCD+e0QtP6/EaY+f88oZADXTaja3sJY:pJhwjwU603b51MYv22ZLKxCD+e0Az4fG

    Score
    1/10
    behavioral3behavioral4

    • Target

      convert-llama2c-to-ggml.exe

    • Size

      170KB

    • MD5

      b62879fea2aaf998abd73a9e59719fc3

    • SHA1

      65b4fdfd6a3c8563f1e7b3dffbe5eaff59dd26c4

    • SHA256

      bf45a3019f636e1fd81356d1debbacc2a2d5600c4a8db6de5e7bb3a34659b8e9

    • SHA512

      6c29ab1b86849bb19ee74688284dc1718eb25f06d19de7d25b702376c64656b05600fa62674534f602bfde105fb088acd4eb12edbd77f13df7269a3299c77a70

    • SSDEEP

      3072:qLDTv2RMm8QcNdPqyIdVVYt4jDl9f+DXTKL+Kmx5OrfjcjctGxS:0X24QKqyIfVIsl9mDXTKVSSx

    Score
    1/10
    behavioral5behavioral6

    • Target

      embd-input-test.exe

    • Size

      399KB

    • MD5

      59f59e054ff22bb20a6046969014f9a3

    • SHA1

      047a27c0b158b8b5cc071db59cc310fa6a9dc788

    • SHA256

      2c0d46eba07272989157c1035b6f4128555e17a04df44b8306236149259df3d0

    • SHA512

      1fa3bfb41644d0080cfd9902c0e3988b96ad9fca581d1e23d0cd99b1eea1bceba0b9bc0b4cf012e3721f4bd52fc97df4fa1bddf959465fb6957760df8e8ef8e8

    • SSDEEP

      12288:do9DQ6M08ZmaJbFOLcRqer0GFFVWK3p+2MordUDXTa7NTV:do9DIjaDXT6

    Score
    1/10
    behavioral7behavioral8

    • Target

      embedding.exe

    • Size

      375KB

    • MD5

      ebea123cf2ce0369070b53df941d9f12

    • SHA1

      59c65fd50a04d5d0cfed4c1f16e2044a6ff29570

    • SHA256

      2f09c4d30ce436ed6ae43dfc612c60d09b5755d5e705f9d04c4900b0718f04c8

    • SHA512

      c3b00e48ccb7ff81be056c0882d0583f49983ec45d400f8b5de8381fd6ce2b0b09504fe5e2d1074cbcf37fc4eed2d0432bad4fe3d1ed68280f235f162b27a7c5

    • SSDEEP

      6144:X3HjyJkKfezj3Rg6MFOZiY+qKvF0xbp6B2+kR9ajHqQ/+75VCZmDXTaPNrrJFdfy:XGdGjBg6MFOZiY+qKvF0xbp6B2+kR9Er

    Score
    1/10
    behavioral10behavioral9

    • Target

      llama-bench.exe

    • Size

      420KB

    • MD5

      0e5b78183e37c5900bd4a2c203b1bccb

    • SHA1

      ae5d2a5b598fd26066b0d5ab86abffcb1a6461f1

    • SHA256

      c3558fd173207949637fbcf16e7fedf90a69842897f0216bf408dcae76ca8d65

    • SHA512

      663cf40c654fcb4ee0202945cbf5b0a981c642ec65c233d6f780d69ff34c59fdf76438ec61f5243bb61ef835b2fb57f73f5be665c1745f43ea3a8ec705a12025

    • SSDEEP

      12288:XSL+ZhdtVy6EhBTTau4S1xWJVfSRUH2cdhvrgzVRBkDXTGkXPufwdha:3Zhdtn6RBkDXTbPufwdh

    Score
    1/10
    behavioral11behavioral12

    • Target

      main.exe

    • Size

      461KB

    • MD5

      5abf36289b228f5eafbf5d3e3d44e324

    • SHA1

      0638666cfbfc2b4f8c4730992bbeec56af2ffdd0

    • SHA256

      ca840d5b84e144b24ddef477dc6a9c0dd980d3fb055c8434323108b06d268985

    • SHA512

      4f86a7321bbf3166fb8f062a37240700b857dfbcb6162a7ea08652d94b6088b2ee6111d1ec5fdc48ca92a50aec3e634a646d4b2cbb84c70ae0c62884c04c527b

    • SSDEEP

      12288:P5SEY3Ob3Id4B8WETsB0G2Ka5DNgx+YNKIj6DYmooGg8D1sDXTy2bhyy:PvYeLI+Ro8KDXTVhy

    Score
    1/10
    behavioral13behavioral14

    • Target

      perplexity.exe

    • Size

      387KB

    • MD5

      4b28cc4febcde5ad3d479622b7c64de0

    • SHA1

      605349dc494791395309a528d4e20d99c16d4ed7

    • SHA256

      66ac1dc806388bad1fb55ab22c7bd2d1f2ebe6fa6867191cb4e50cb92aa10444

    • SHA512

      b80b7d8ae7f2ea54870f605d730c231d5abf4b0d4978c3852a88762a779ca3356241cb4c40e04bfcd770dece850dea5fd4461cfe9935a60267ff3b2455699197

    • SSDEEP

      12288:73QUeYzip8TDNia9TOToBs0679XhuFyNKkkrtp2yDXTay8:73QUeYzgOfvDXT

    Score
    1/10
    behavioral15behavioral16

    • Target

      q8dot.exe

    • Size

      88KB

    • MD5

      e80201328cfeb5e8e944fe8a7fe04e80

    • SHA1

      a403a2142a0bf8c813d927c653d26fb93060e0a4

    • SHA256

      51ad16f553877520d5089a81d2c905b7b43a448821db60c48b7acc3027e51208

    • SHA512

      fb5236c925d636455bba5866cb4fd6b03145c4532e52cc0645d5b63514c53bf3bb3114073bd05575f17ef6cbf344de1f386d78ccdf5d222242824e2805475e9a

    • SSDEEP

      1536:YgrygB/PVLnaNDXTy5/54pfKJxLiNKZFvCPUZ5n2KMiddEc539p:Yda/PVuNDXTyJ+pKJxLi8z2KMhc59p

    Score
    1/10
    behavioral17behavioral18

    • Target

      quantize-stats.exe

    • Size

      212KB

    • MD5

      6fe3416f30ccbfdec21fd39aa06c6d51

    • SHA1

      a1be79c177f0c2d02c8764c81497c247cc6de5a8

    • SHA256

      0e8383eb16e290d22f9699dacbe7ca014cfeef766ac27f306d88d20246ad1f8d

    • SHA512

      163397d537ef3861f8ed62054a46f8b8858686cd00bc07abc564b3aad47a2182900776a865422485735cf83698347385bb21ffb19cda6ddb98eebd37634d987f

    • SSDEEP

      3072:gU3LnYDQRfVxfjKItbiswlgn5DXTSeyKVxu/cTgTdmW5ocNu4pFIdEz:gUbn1RNxdlillg5DXTS+3KduUIdEz

    Score
    1/10
    behavioral19behavioral20

    • Target

      quantize.exe

    • Size

      145KB

    • MD5

      cb95c785478b96987a66f1ff325a3c74

    • SHA1

      a2344aaf47a56ac82e1b1204a329479463916b4d

    • SHA256

      513b9a5aea8c99764a4af5f6361e751088cda3709f0ced26f19606605ed5e79f

    • SHA512

      b5e604526dbbf48003d267de826bf6321a3be3524e1710ef5273fecd329f3b18fc76a7328b872ae1fbbc6dd6b42a9001173feea5eef45a8063cf4bfdc10ce5b4

    • SSDEEP

      3072:atY1EvbPghaDXT6yuKpx3eDv9kbEgDL6cdFVA:aQEkYDXT6uj2t+

    Score
    1/10
    behavioral21behavioral22

    • Target

      save-load-state.exe

    • Size

      365KB

    • MD5

      bb78b57dafdb3a9b6e2f013e6ef02106

    • SHA1

      156d8d001cc0a4912c25a6a893589099dfe57f77

    • SHA256

      b3702d0e60064a358da9ccdc1eaee6831cf4a3885d57bb8637ea6adc4e3cf534

    • SHA512

      ea0316726d870ce3b99de58d8f12c646f9a10b9ae1fb29b4d0605f31da376e015d1af4015dd6707a23bd833e2ff785cfafe30dc9320fedefed9d6cfab5f2e7d7

    • SSDEEP

      6144:/e5Tdnv0xeCI/xLbhyvQh3NT0SG09wbRkM9WDeLm3wWe+TyNtkjZXDXTHvPxqwDD:/ymlwLbhyvQh3NT0SG09wbRkM9WDemwW

    Score
    1/10
    behavioral23behavioral24

    • Target

      server.exe

    • Size

      840KB

    • MD5

      3d841d494febf8854a8e948d17c17a08

    • SHA1

      fc07906acb39bf74550dddfeea7a87f1f9ffada4

    • SHA256

      5948db564d40068e8a2f7ad4562440f68fdebecfe1d655bec379e95ac11a7399

    • SHA512

      2974effe978b0c1bc71dc800bb2e7b86f75da4c7c981a3db70add76cc297d1b7b7abd7a4367b2e509816d311472da969621090080f193c6c9c87ba2e0014f8cc

    • SSDEEP

      24576:FXfNbaah+5LsVHL+Z88ODrlTDXTAyPjhnq14Ld5Abp5w7H:BFbyRsFLsODrl9Xf+p5c

    Score
    1/10
    behavioral25behavioral26

    • Target

      simple.exe

    • Size

      327KB

    • MD5

      b64995896fcabbfa46cd16f4bc0da1e2

    • SHA1

      295e5201876738ea256803b5ce44c93e669ba795

    • SHA256

      c91949bd9cb5b5e33aabe8a81a758231ee231dac2897f8a2cee18cd57340ce39

    • SHA512

      5cae244ab22432662dc4bf004fc321418c52f96803deb3c0027510bf8db75bb01263b28415d56a9ae09d7547c652f31710708cc5d7604c51304a86cf66b82b45

    • SSDEEP

      6144:bNS6jI4I38dkUvXpIsVyYgnu31W0x+oA4ztvrvfBJ+NzknZiDXTaCLDWzOxhDF7a:bjIFMdkUvXpIsVyYgnu31W0x+oA4z1BG

    Score
    1/10
    behavioral27behavioral28

    • Target

      test-grad0.exe

    • Size

      261KB

    • MD5

      bb395b0cb469c6f1cba9dfab97d074b7

    • SHA1

      b18995c70ca179db1bfbea513c874abb0bb3f20e

    • SHA256

      f08493b710edc85349bc05909171231cba1250cc014f486d45d8e89eeed8d6e5

    • SHA512

      f00fa2aa433f0fc304475e7984ed2602632ac28ce983822f9fbf4cc6a4c6b299deb443750e18e3b6cfb251d37666d301ac7eb8b75804534cfc91522923d89b9d

    • SSDEEP

      6144:arqpBTWOzaeSgeMNtyv3rr9b0HC/x3G81mhW+cHIZ/DXTaCjvkF:akBTWOzaeSgeMNtyv3rr9b0HC/pmhfcr

    Score
    1/10
    behavioral29behavioral30

    • Target

      test-grammar-parser.exe

    • Size

      41KB

    • MD5

      a9ba1065174ded86502b290f2089bc38

    • SHA1

      de7bdc724da92cce48223131982fdc6502b1290c

    • SHA256

      87b25ba6b03ebb144495e8b5a22f503ab3d38f7e5f195555f9879712dcb7bcfb

    • SHA512

      4f7fcc399fe07649861a67eb0a956924a67e9d48fc8e2792fab6c37aa1fca5b5418fb3fa7ec872f556e1577dba53ffc5b8b4a54503d41f36bfba879ed751d55d

    • SSDEEP

      768:mxzOG3bSmDU8SMi+PStp8zQlcAvEUopzaMrDTZIx314yc:832v8SMiZti8nvwhfDU4y

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks