Overview

overview

3

Static

static

3

char-expor...rd.vbs

windows7-x64

1

char-expor...rd.vbs

windows10-2004-x64

1

char-expor...18.vbs

windows7-x64

1

char-expor...18.vbs

windows10-2004-x64

1

char-expor....4.vbs

windows7-x64

1

char-expor....4.vbs

windows10-2004-x64

1

char-expor....1.vbs

windows7-x64

1

char-expor....1.vbs

windows10-2004-x64

1

char-expor....3.vbs

windows7-x64

1

char-expor....3.vbs

windows10-2004-x64

1

char-expor....5.vbs

windows7-x64

1

char-expor....5.vbs

windows10-2004-x64

1

char-expor....3.vbs

windows7-x64

1

char-expor....3.vbs

windows10-2004-x64

1

char-expor...6t.dll

windows7-x64

1

char-expor...6t.dll

windows10-2004-x64

1

char-expor...or.vbs

windows7-x64

1

char-expor...or.vbs

windows10-2004-x64

1

char-expor...ir.vbs

windows7-x64

1

char-expor...ir.vbs

windows10-2004-x64

1

char-expor...ck.vbs

windows7-x64

1

char-expor...ck.vbs

windows10-2004-x64

1

char-expor...lg.vbs

windows7-x64

1

char-expor...lg.vbs

windows10-2004-x64

1

char-expor...le.vbs

windows7-x64

1

char-expor...le.vbs

windows10-2004-x64

1

char-expor...ry.vbs

windows7-x64

1

char-expor...ry.vbs

windows10-2004-x64

1

char-expor...us.vbs

windows7-x64

1

char-expor...us.vbs

windows10-2004-x64

1

char-expor...er.vbs

windows7-x64

1

char-expor...er.vbs

windows10-2004-x64

1

Resubmissions

20/02/2024, 23:16

240220-29gxysgg48 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PalCharacterTransfer v1.3.2-382-v1-3-2-1707600550.zip

  • Size

    12.2MB

  • Sample

    240220-29gxysgg48

  • MD5

    e6e83474b096e1c0958f71ace8b8293e

  • SHA1

    c859fe6b538a3bbb9616847b41e485957833efbd

  • SHA256

    30975dc0161c0d93b543b8c7661372316c797a5c333e9e9006229254e90c9281

  • SHA512

    431f1c6b953a72a7aa96e20d05ca39be021b5cb65612d2b65259d398adbbae55960fb3dabeca3b18139f8152b2f5647deee6af53027fa4c7beca96e2658e5885

  • SSDEEP

    393216:pBB1As0TswG/LjFZ2IbwwIOEP2roPCxU+L:Hp0Tshvr49PoTL

Score
3/10
pyinstaller

Malware Config

Targets

    • Target

      char-export/tcl/word.tcl

    • Size

      4KB

    • MD5

      e4859d81fe1f3514cdb23dc52fccd452

    • SHA1

      e8122a9db401079a76f58fa6760d2f042492c565

    • SHA256

      b0592b0e1fd6c3c0e704168d4af97e9d5cab89b5cf5176e19ed5bd5f5eb2a175

    • SHA512

      378c90db867f30509fb1a04f4bbbb0bc3d992a4a26bb6e702ba2918e463b015b1c263f267a17055cf7e47d72ac596ad87b13367416018356630c2c4056db7e42

    • SSDEEP

      96:Le+lfW37GWdh85qWdhAjgr9a+1FeS9D/CkXg6gvF9D/CYjX16AyyrGuA11/JRJ6T:q+lc7GW85qW9a+P39DCd6gt9DC+6AjGk

    Score
    1/10
    behavioral1behavioral2

    • Target

      char-export/tcl8/8.4/platform-1.0.18.tm

    • Size

      10KB

    • MD5

      5158c4fce8b0abb4077a3fd028d28b76

    • SHA1

      9e9e946ab222e0c4ec25ce7c38f7975b5e434552

    • SHA256

      24630064571ade8d27bfeff84cae09ffec452a0ec3ccd984ff31e8a7821c27e1

    • SHA512

      3203d7a9d4c54cf9dac2876480c9b541653e2c9cdb061e8905d8bb9a8d023497c37386bc31b03876568dfc7c6eb50c6246b594407997b80723b2440020bb26d1

    • SSDEEP

      192:oM9irmmhZgxr3FbnvnaLqPlgspxUth+PNkuQmYz6mh8029S2rPYl/Lz5WamL:oM9irmmhixr1jvQspxUth+IzX29RrPOM

    Score
    1/10
    behavioral3behavioral4

    • Target

      char-export/tcl8/8.4/platform/shell-1.1.4.tm

    • Size

      5KB

    • MD5

      2a8b773513480efa986d9ce061218348

    • SHA1

      85763f378a68ba6a1eee9887cdcf34c14d3ad5bf

    • SHA256

      2f812a0550716b88930174a8ca245698427cd286680c0968558ae269ab52440d

    • SHA512

      d3ec3891cc897a8abb949eba6a055d9283ba6e491e1caea132d894e7b3fd3b159e8226e0bbcdf369db3f0e00aa1e0347e5b1838353e75b8ae114a83016010238

    • SSDEEP

      96:Wo05xaJIrnU0gEMydSv+lrnU0gEMPdSvfSrnUN4y1mP3jm5Q1/I+gYQ1KyHe36mV:Wo05xaJsnU0DMAK+5nU0DMFKfunUN4Oc

    Score
    1/10
    behavioral5behavioral6

    • Target

      char-export/tcl8/8.5/msgcat-1.6.1.tm

    • Size

      33KB

    • MD5

      25d63d3ec0d699d8ceeaef6ed066c99e

    • SHA1

      a342213e18f78ff605033abd6c7b107c943aec72

    • SHA256

      d6b9cabb03539e116aecb80efc7a69d43f936075f6ad5c77dfa5d46dad7ddc7f

    • SHA512

      a070b8c7340619b4fa0167e2ed2e29aaf9dd3cd943a6f4559d14490cb439428299c6e9fe1a937ad7184a57f95835970fab59e98338262bad3dfae0263bb36110

    • SSDEEP

      768:8oWBAxonz0L7KILBk0U8Vl9NFljRFpGA1TrPiBDxDFP8sCNl:PWBAxgzY7KIL7j1NFl1Fp11/PiBVBksU

    Score
    1/10
    behavioral7behavioral8

    • Target

      char-export/tcl8/8.5/tcltest-2.5.3.tm

    • Size

      101KB

    • MD5

      e0d47f197e467a710c6417e67f03f677

    • SHA1

      89872dc3212692e5dacbf344f48a400bf85a630f

    • SHA256

      184ed6dad4756ef822320298ceb8c05be228018a6ec25b534077b6a9353ff76b

    • SHA512

      2104e5d3da2ab8e770d1f74f5d0660571fb1b60c977444e5a96fc5e27465b028c8c926ac98aaf4bd8837e940ede406e24dcdf040a07f0bf8330aeb934bf09ff1

    • SSDEEP

      1536:rVUuHUk3tqN0E7NkhtMcrQ3qoyX2/2r/LTM5tfH/CrQnXcwIHS8DH/mdzvL21i41:rVU7OCVpnPIHS8DfmdDL21hK/xaEfhC

    Score
    1/10
    behavioral10behavioral9

    • Target

      char-export/tcl8/8.6/http-2.9.5.tm

    • Size

      109KB

    • MD5

      bfdaabed11be91f9ca5e0aef48d48db1

    • SHA1

      7bf6750c9ed94c711a74e50a76e08606338fa0f7

    • SHA256

      225041fe160c0778dbb07134cb9836e83e8fb28188958ad78eb9992f5655762b

    • SHA512

      330afb61e85d072e611fcf5200d881f7a3b778cddf4aac769a3054a0ab0d967cc4c6e12ef8449c594c3f6d7c6bb77175fec46ae5ee34595a935937b8805e86aa

    • SSDEEP

      1536:n8RYkDjVePnJJFA09W9Jdv3uM/2QXjjCV4GXnnA6MaLm1r:n82wjVePnJPApdv3s+CV4G3A6rLg

    Score
    1/10
    behavioral11behavioral12

    • Target

      char-export/tcl8/8.6/tdbc/sqlite3-1.1.3.tm

    • Size

      18KB

    • MD5

      a9386086fbecdcb90613d96dd90f7640

    • SHA1

      597b53c980221947b82eb1024f7bd3ac438727b1

    • SHA256

      93f763819749a0430485960dd89a8aa3051dee7b2522142817e0923e2dede02c

    • SHA512

      678af7cd6ca8be516624ec0c5da1c660647c6442a16cd6020085928ffc044c2bcc830ca06eb28e341505e22cc1ce7d850b5462f527b876b2172b21fa2b1f63ee

    • SSDEEP

      384:OfHhRcZO6UFZFKHC1Vz8+DPnXHpL1PBcu0fAmT:O/hiZO6UFZFKIvDPnXHzB8v

    Score
    1/10
    behavioral13behavioral14

    • Target

      char-export/tcl86t.dll

    • Size

      1.6MB

    • MD5

      7a082e56bab940b82e513db57acf9fba

    • SHA1

      374c3955209be6c4041cd1a2480cddde9880141d

    • SHA256

      3bbd1a25b0bb2663da1895506b5a5e8405937e7cdacec3f5ab3aead16b2dd7ae

    • SHA512

      fd4234431a40c2f14c58032c5e6ee95bd6d2ecf84bdd197368186cf130a9faf2b6b26020cd951c6a737dc84f23c6dd3678a3748d6ac75b5fac027aa860694734

    • SSDEEP

      24576:Xr1XCnu/gyn3VZWHW5zHx3blI7dB/B16GnwFRzCuOg3BRWTMqr9KD8q1lXStTLVa:Xr1XB4yjGnwFJIg3BRQ9KB1ctTBeS8

    Score
    1/10
    behavioral15behavioral16

    • Target

      char-export/tk/bgerror.tcl

    • Size

      8KB

    • MD5

      de7ffff8033b00826374dde1bf97ef0f

    • SHA1

      4e1c9c4ded5b28871d4c9c163568205206b18a1c

    • SHA256

      64448552e9dd75e84b8df63529e67f96db9351d4913ec2e96fd529fe4c35e05b

    • SHA512

      060b6be35c980e6e5480f7b509cf3e271b978ba78c70c4ba750db77d64c14069935e4a6846bed50c4f871efb3ece412e9ac5cf16e792d4fa474da1569967f648

    • SSDEEP

      192:tKrjbDL5/gnNFirz1DQQ2d4YGpFnIVTBoSrMxZ34qf9GnEF5SpcJV+H//iNx:tIjL5/gU/jcVSxbXKKv

    Score
    1/10
    behavioral17behavioral18

    • Target

      char-export/tk/choosedir.tcl

    • Size

      9KB

    • MD5

      e703c16058e7f783e9bb4357f81b564d

    • SHA1

      1eda07870078fc4c3690b54bb5330a722c75aa05

    • SHA256

      30ce631cb1cccd20570018162c6ffef31bad378ef5b2de2d982c96e65eb62ef6

    • SHA512

      28617f8553766ca7a66f438624afa5fd7780f93dc9ebdf9bee865b5649228aa56a69189218fc436cedf2e5fe3162ad88839cbf49c9cc051238a7559b5c3ba726

    • SSDEEP

      192:MvjK3vpIKU7JBhpZofNAieYemp8U3wNV97oZQWpopePXUsyWjocIegf6tq9jJKT4:M4viKeBQ+3M3wNwvwsFyoIegf6wO70fN

    Score
    1/10
    behavioral19behavioral20

    • Target

      char-export/tk/clrpick.tcl

    • Size

      20KB

    • MD5

      7de18c8799e987dc33d902ebcba164b0

    • SHA1

      8ae971d41721b6fc1e912d35612db14a7fd67a9e

    • SHA256

      44a247266bcc500adea55f487df384b3ff16c1fc0744410b7a4ef195e51a4b6f

    • SHA512

      bb3b1c50d561d5ebdf24a503719cba54fedb18a386036f8e4b09507bb917f2a8de61d9cb4da4b793483cbadbfadd9c99d92963727f20b9c470d996d49f8cf6d6

    • SSDEEP

      384:HDJsgeqJelEu6i1T26UYdTVDyPHxQlufbtIeVj8dOqAQBxhKN2zD5Ed9bmqU/FC6:jagJJnBfxQ5f9

    Score
    1/10
    behavioral21behavioral22

    • Target

      char-export/tk/comdlg.tcl

    • Size

      8KB

    • MD5

      39adbb446c161da60233a793171bf3b9

    • SHA1

      51e2b5bae9194e7b1bbd34cafcaa3d22b5e1c6b7

    • SHA256

      f62ce5b8450ae7b3ec2bdd9fdf67c77fcc99aa18de195de5337c75c997a4b11c

    • SHA512

      833c5090a5afbf9881036f92f42a05feb738eb95b0439002d14345a90ca99d7234abb09d60d345dfc22f07cd4e790dc0793bc9e044e869fb079f7166c71329a3

    • SSDEEP

      192:Afpd7cPy5HEOnbKU8QHyWpSWNRYs50asAZ5QWlO+W0WvHv/3WvWHwV7vWKpTTk:AT7c6HJbKCyWpZNRYEVVET1rvveuHSOT

    Score
    1/10
    behavioral23behavioral24

    • Target

      char-export/tk/console.tcl

    • Size

      32KB

    • MD5

      a0d75c6e9e95a2c3da1992def34dbbd4

    • SHA1

      3f6aa0a215795a6d1bdbd80392468ba3c96e43a6

    • SHA256

      24a4b9199ffb445949e8313c26fad3a129ffb19787a09fd08005bad9b0874585

    • SHA512

      cd222220f9079eb36119c33d100a66fec8b021e250ca190332c922d6247ec91305768115a401cd2f1b10d0cbd969dd56a1c8525ab010876ac9938cb7a56e9fb0

    • SSDEEP

      384:GkptctbgWz4xjtyU/W1ZQWSLEwYGl7nZH5J+Ry3+uQlLW4qqvRHRJStCO2FfB25b:Gkpe+Wz4miZeG7J+RMYZaGGWFOYoV

    Score
    1/10
    behavioral25behavioral26

    • Target

      char-export/tk/entry.tcl

    • Size

      17KB

    • MD5

      2592ba652aaa81e679120283343429eb

    • SHA1

      bfd48c34766eb1fad966a6b784d5def85c34d4c5

    • SHA256

      d935cb828ac8ddf1a96ddf7e23ce18a354b0323f6c784e3e85de60f5587f5c7c

    • SHA512

      bf1fc3d400c5912eac4b6f1f6d86b96db8802a8b57559fcfbe87549fbaa149657c7a0590b890fb8be2785c5936077e378a2868c0e5524aecffee1bcbe503676d

    • SSDEEP

      384:POSeFkH2fR4OIOeQod3tdAERNwMIDlXVQgXwDvi7:POTFD4nAGA

    Score
    1/10
    behavioral27behavioral28

    • Target

      char-export/tk/focus.tcl

    • Size

      4KB

    • MD5

      7ea007f00bf194722ff144be274c2176

    • SHA1

      6835a515e85a9e55d5a27073dae1f1a5d7424513

    • SHA256

      40d4e101a64b75361f763479b01207ae71535337e79ce6e162265842f6471eed

    • SHA512

      e2520eb065296c431c71dbbd5503709cf61f93e74fe324f4f8f3fe13131d62435b1e124d38e2ec84939b92198a54b8a71dfc0a8d32f0dd94139c54068fbcaaf2

    • SSDEEP

      96:mumhRUI7F2WyHm6BUyNhEf6jUHKRUI7F2WyQe6L763AcnK0/61sk2ko5AgEplauw:ERUQFU52CNRUQFpLOQIG1sk2TCLplauw

    Score
    1/10
    behavioral29behavioral30

    • Target

      char-export/tk/fontchooser.tcl

    • Size

      15KB

    • MD5

      058e5705fe78844611e07f6630a70e63

    • SHA1

      05c0badbdd0150bb6f6ef347bebbaee74e929cfe

    • SHA256

      08199dfe00ed822a87d9276841094e05bb4e11ea6b5ad33af18ddfd6c4aa3df2

    • SHA512

      f40b2d9624ae8bc694e7fc8d2127564be7e5c46f5348a085702952571e5dff241c0d674f7ab1c3fe797694fd8b8399733a9cd11888ae9c22aafd02f3ece8a27a

    • SSDEEP

      384:7FMVUJgzMlgP2Xg755M5Zic8Ck/YNtG4E7xCPo:7FMVUJgzMlgP2Xg755MPicO/Y5ED

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks