Overview

overview

3

Static

static

1

PROD-WebLo...5Z.zip

windows7-x64

1

PROD-WebLo...5Z.zip

windows10-2004-x64

1

Core/diagn...on.txt

windows7-x64

1

Core/diagn...on.txt

windows10-2004-x64

1

Core/diagn...gs.txt

windows7-x64

1

Core/diagn...gs.txt

windows10-2004-x64

1

Core/diagn...on.txt

windows7-x64

1

Core/diagn...on.txt

windows10-2004-x64

1

Core/diagn...gs.txt

windows7-x64

1

Core/diagn...gs.txt

windows10-2004-x64

1

Core/loade...on.txt

windows7-x64

1

Core/loade...on.txt

windows10-2004-x64

1

Core/loade...gs.txt

windows7-x64

1

Core/loade...gs.txt

windows10-2004-x64

1

User (Prim...ug.txt

windows7-x64

1

User (Prim...ug.txt

windows10-2004-x64

1

User (Prim...gs.txt

windows7-x64

1

User (Prim...gs.txt

windows10-2004-x64

1

User (Prim...ts.txt

windows7-x64

1

User (Prim...ts.txt

windows10-2004-x64

1

User (Prim...s.json

windows7-x64

3

User (Prim...s.json

windows10-2004-x64

3

User (Prim...on.txt

windows7-x64

1

User (Prim...on.txt

windows10-2004-x64

1

User (Prim...gs.txt

windows7-x64

1

User (Prim...gs.txt

windows10-2004-x64

1

User (Prim...on.txt

windows7-x64

1

User (Prim...on.txt

windows10-2004-x64

1

User (Prim...gs.txt

windows7-x64

1

User (Prim...gs.txt

windows10-2004-x64

1

User (Prim...e.json

windows7-x64

3

User (Prim...e.json

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PROD-WebLogs-2024-03-10T10_39_52.165Z.zip

  • Size

    428KB

  • Sample

    240310-mqq9ysba3v

  • MD5

    3087e8e9f906bcf32ba00df8af9ed02f

  • SHA1

    a9befd87441638504fc6b412322dedf2c5e4a42d

  • SHA256

    fe60b9bf14242f198dad76b2fe62f9818c44958a882b05ff3c814e5be3b059ae

  • SHA512

    4886404db08b94cbfcb92fea351d90f5f06bbad1da027dc8b637feaf7a4490f03a57ff9ca9a5b41c0015426c3c91cca6b1bb29b77405e80e6aa2151e58dd7eed

  • SSDEEP

    12288:8Yak2lRRYhyWJKPGvuJfqPx1rrF1kBT4yl:8YoFW8PjBqPLrrMn

Score
3/10

Malware Config

Targets

    • Target

      PROD-WebLogs-2024-03-10T10_39_52.165Z.zip

    • Size

      428KB

    • MD5

      3087e8e9f906bcf32ba00df8af9ed02f

    • SHA1

      a9befd87441638504fc6b412322dedf2c5e4a42d

    • SHA256

      fe60b9bf14242f198dad76b2fe62f9818c44958a882b05ff3c814e5be3b059ae

    • SHA512

      4886404db08b94cbfcb92fea351d90f5f06bbad1da027dc8b637feaf7a4490f03a57ff9ca9a5b41c0015426c3c91cca6b1bb29b77405e80e6aa2151e58dd7eed

    • SSDEEP

      12288:8Yak2lRRYhyWJKPGvuJfqPx1rrF1kBT4yl:8YoFW8PjBqPLrrMn

    Score
    1/10
    behavioral1behavioral2

    • Target

      Core/diagnostics-error-logs-previous-session.txt

    • Size

      317B

    • MD5

      129aa0f5d51429147e481d461bca88fb

    • SHA1

      cb7a261cdf3f0ae1209d6d3733427e06830a28ed

    • SHA256

      338924c336f771551c3209251bbda78378cb7fa75fc4d31277e2583584a2e4c1

    • SHA512

      e3d554caaf79c702aab7417784e8a420f8c2570d851eb2156b39ab5fca92aa81b0e91638aa404835add56f3bba54be7e77a12d73e438f59cc04748574d70c85e

    Score
    1/10
    behavioral3behavioral4

    • Target

      Core/diagnostics-error-logs.txt

    • Size

      450B

    • MD5

      487c880e7f17c9c831e346fa6410d876

    • SHA1

      aff0635ddde93a449ef0cdf272ba0beb13c61d64

    • SHA256

      cf27a7ceb4a5c69f97dce9ac42c47b9665c8812ee89906b78d2a048f1eaf67dc

    • SHA512

      050447c7dadd217eb0142453f59ce8a8c40c7185b485b2cc2edd816d505d7100dd3efd10fde90bf1010c8f020b024a2b9b2ba251e3d0b902ec03e81419febdd7

    Score
    1/10
    behavioral5behavioral6

    • Target

      Core/diagnostics-logs-previous-session.txt

    • Size

      173KB

    • MD5

      bd4eb61d4a0b618c00fc02dfb6c40e77

    • SHA1

      416a27b44e161e3154e3d61191e865278e9837b2

    • SHA256

      5f6b784ac5c27b53c3641bb28230f3527c0926604ec6dc45529788660006904d

    • SHA512

      2b8df1eb5e6f87561f52be15fef2463aa4ee9596231629526ee2619f200a4c1786ddcee043689488bae334c2b9957dd76f7db750b6fca8f94d7c5d5050404c41

    • SSDEEP

      1536:TAVtRXbwFLTnavS81yd4W6Nzyv+41PUVT6ZfZLwPhXt7Gykv:m7q81yd4Y1PUVT6ZfZYtNkv

    Score
    1/10
    behavioral7behavioral8

    • Target

      Core/diagnostics-logs.txt

    • Size

      468KB

    • MD5

      9b5d6fbdcf0bdfd09b6a22d4b88b4ecb

    • SHA1

      d69ba23891ace48806819fbf878709eded4109e8

    • SHA256

      5e9e44bae828e86d598221676a6b4cf16bbe0ab4dbc11cce4e351ebb0f37d5b1

    • SHA512

      4e46aed83b47267e60b35f1bbe6292d81b280f0914821b657f8e4d8c4c9fef65c4c5610d3e8d6828bece54953c1580e2639041cd81fa933e30e711bb4387a28a

    • SSDEEP

      1536:mXEe07FJ+a/yLpXiRCX6RaX4naGKDSqFvNi2XZ9VnLb07n2Td8KCKXPK+mXgx3sV:mXEe07FJ+a0GKDSiI7n2Tda/dOY

    Score
    1/10
    behavioral10behavioral9

    • Target

      Core/loader-diagnostics-logs-previous-session.txt

    • Size

      12KB

    • MD5

      6e0153e645344a783e05920a05613a2d

    • SHA1

      d107e9bbd1c11ec86a6f891c4bba080305547b34

    • SHA256

      b883fc72e323bb6c8d5d093bdace88ea2d2793538969d7ac40ced8aa8b4ba00b

    • SHA512

      3a4cf5ff6340fff1fa13ff52a8b78eda93f76678278ddc261e3f32e60d2f9ce4f90083d0432972008d0921cd42970d48cc53c69ef5e2a9b4048f9acc036c315d

    • SSDEEP

      384:5Wdxuo7iRQTGODn6q2RPUrjw8/ymzOAdPmKA3+DWycR18aVEr9k56u79cFbD1nG9:wdxuoORQTGODn6q2RPUrjw8/ymzOAdPY

    Score
    1/10
    behavioral11behavioral12

    • Target

      Core/loader-diagnostics-logs.txt

    • Size

      12KB

    • MD5

      cf1c8b0ca0a4429ffbf84a5633207c01

    • SHA1

      d483954e5a3d508e721a9ce212391eae0f543387

    • SHA256

      7b506e7ff8d7c81a7413b367bf7e39deb060952812f73fd9a230f812a0352fd6

    • SHA512

      003231d6e9153e9d7d943c23aaa9d1f707673165d0360b8ec76cb0d45fa2427f893409d57849e58e740d0f196ae4aa5a4f6590d7b32de8bfea1c144f5fa8c1e7

    • SSDEEP

      384:RWsLwo7s67o4Q1e/COpQb/HUwDqeXnBBfaewHywVxfauMOZw/ZQtGCPZL2bUmdIL:4sLwoQ67o4Q1e/COpQb/HUwDqeXnBBfm

    Score
    1/10
    behavioral13behavioral14

    • Target

      User (Primary; 8705f821-91c4-44c8-bc63-3128ab519c2a)/calling-debug.txt

    • Size

      798B

    • MD5

      0038743c2e3985ccaa9a6c444fd091b5

    • SHA1

      c897c99926938f9634ab6dbf6e6a0c439670a680

    • SHA256

      d2c6fe740fd74ddc86716434a142639fdd5a4e4e11b0b665c7091416444b5cf6

    • SHA512

      5df9c7f5da4df6db313482e8a3f8e71de3fbdca4e7ea6e8be56b8ada58f468ddf06e97532110230a4c2c03f3131d59b95ec48e0eca0e25d1dd243ee156128911

    Score
    1/10
    behavioral15behavioral16

    • Target

      User (Primary; 8705f821-91c4-44c8-bc63-3128ab519c2a)/cdl-worker-diagnostics-logs.txt

    • Size

      199KB

    • MD5

      6e2fed85c6e995a687b9a6ec687b029b

    • SHA1

      3f265b4a19856b7305c499695e2c063bd1cf9594

    • SHA256

      8568b8d039a44b2435863921c1b36a4e5a7ce8fe003ce6e20eb45c501447057a

    • SHA512

      fd1a02d4db6bf495e821e242be8f2f1949b9793094dabc0a1bf6cb18baffc9872d0cdf134fe1793182f6b61dd6dcf8e43f9877bc0ebb8a2c4704568bde4039e5

    • SSDEEP

      6144:mMZ+LWogmhj9pgx7EPDj+ycAhNxDw3TnfT9hR:mMZ+LWogmhj9pgx0DjlcAhNxDw3TnfT1

    Score
    1/10
    behavioral17behavioral18

    • Target

      User (Primary; 8705f821-91c4-44c8-bc63-3128ab519c2a)/cdl-worker-requests.txt

    • Size

      9KB

    • MD5

      560ba45e2427985329a32810f2d0ff71

    • SHA1

      c6bd5276831f0e5047ef70b9e53eef9c34bd340b

    • SHA256

      3e6206cb4d82d20db1f0e27a1b0bc6df8bd6042ff7ca9df4824d15c57e4ebbae

    • SHA512

      0eeec96edfb9f4d24033aba26ef92b04c6f8827d851c85a48d028c937922d0ab8c71b2bed69f85b23b7f8b3d2b02a37a6af21ecaa2679fe4c1027314a26e27ae

    • SSDEEP

      192:LYBQPKlejMzDB9/nM4DiQzceLyuXEkHLWnljRVcVra:9cO

    Score
    1/10
    behavioral19behavioral20

    • Target

      User (Primary; 8705f821-91c4-44c8-bc63-3128ab519c2a)/cdl-worker-settings.json

    • Size

      270KB

    • MD5

      c83ac5be7fbce9642234ec8b9f167b68

    • SHA1

      1a9b02f11acd751bdbf0512902047f9fde5939e4

    • SHA256

      d4ca66d5a14b69c3e18561ce02cafb0a5118716a14edde9cb6e907f7b8ba295b

    • SHA512

      9b47fe7111599b1d761f7d2249cc0d10e56e4a9918d87e1b893e9ca2bf61f8a4ef3b54341901754667bb0732183a22d947ee17812f9c8e459c28f2093b2a6601

    • SSDEEP

      6144:61fKhR/03A73AM9oA9oyy2NlO6FxtIAcC:Z03A73AM9oA9oYNlaAcC

    Score
    3/10
    behavioral21behavioral22

    • Target

      User (Primary; 8705f821-91c4-44c8-bc63-3128ab519c2a)/diagnostics-error-logs-previous-session.txt

    • Size

      99B

    • MD5

      02bb104d14765f9f69799178833520c1

    • SHA1

      0cc23002d059455d181d12388fe79316e536bbd3

    • SHA256

      dc1d6baf5194d45b67787e3da0ab4f5ef76d8abaad068bce3ca8bbbb79d315f3

    • SHA512

      24d390043ad99c301c3e0c8355ff3787650fab6b4d9733af8e7b67c9c76395b54d6830656fb645064ecf4ff73697e5dadaaef6ffa486bb4a0a29da246c4f2638

    Score
    1/10
    behavioral23behavioral24

    • Target

      User (Primary; 8705f821-91c4-44c8-bc63-3128ab519c2a)/diagnostics-error-logs.txt

    • Size

      373B

    • MD5

      ff62c3885422a29405052ad10be2f9b1

    • SHA1

      f6fa4cde1c8720258ae1f34f2bb40fe99cbf7616

    • SHA256

      53c0b099deecf2e7b3b3ae932c2aa13b1f4af75e4a2086f6d288abbec1ab6d2f

    • SHA512

      d71e376340f5518e3a5e25072c3c7958d659650205da713f7bc157f1add01c77baad10819f08a4007e9e75e54c3bac3eff019b3c3f519e800f8038e91db7814e

    Score
    1/10
    behavioral25behavioral26

    • Target

      User (Primary; 8705f821-91c4-44c8-bc63-3128ab519c2a)/diagnostics-logs-previous-session.txt

    • Size

      38KB

    • MD5

      23fb954e16aba2e7d8007544fa31fd9f

    • SHA1

      abbfad628768023a3458355568cf0655c3ec2f9b

    • SHA256

      0f2518b17abce73c9d7ead143797e521171e15e5c31734b6215f329968a79380

    • SHA512

      b59b278b3607858866f5c84b91c3105b62bc339ee6fd41abbe83bad89fa7163c18cba093faadc6ade3e15ceff9a84bdf1d2f2f387b6791515d208316d9d8c9f7

    • SSDEEP

      384:OEvY+BQ+uju/DQpiiiZdfQpz9LbILb8IUMzRCwdOCRfCsCkCH6WPmJAArMBsTtBk:OEvY+BQoQmdfy4vnWSjtBI2mQC64

    Score
    1/10
    behavioral27behavioral28

    • Target

      User (Primary; 8705f821-91c4-44c8-bc63-3128ab519c2a)/diagnostics-logs.txt

    • Size

      366KB

    • MD5

      24a7886c409d75d9d516df590255daf3

    • SHA1

      2fdcd89f1e65690f8a6926df8f7e23fe960417df

    • SHA256

      d59b874ece5af42bf4cee2ae3ef415cc7545a0894ec03fd31507d9461f9052bd

    • SHA512

      2734e4a1ebe87f3d5363aed206a0ec18b8d51e68986b673d92482a36ef430c59773291a08d4493e04c18f309bb16cadaa23a7613c81148689d47b2194baed0f4

    • SSDEEP

      6144:drBDzQ1sdvvvvJJt1tgggggUq9nJ2JvEJL5o0nWLMrTd:lhzQ1sdvvvvJJt1tgggggUq9nJ2JvEJD

    Score
    1/10
    behavioral29behavioral30

    • Target

      User (Primary; 8705f821-91c4-44c8-bc63-3128ab519c2a)/local-storage-usage.json

    • Size

      2KB

    • MD5

      078fedfd2b5b795eedab2c463fde10ba

    • SHA1

      9dc891824605550aea0bfd902f908a39ab6c4d5c

    • SHA256

      387ba17b0a74376b49a05c9ea51156feb92c7bd13d31a2293a57a003f08967bd

    • SHA512

      f911c575d6a07987a45922a18f60986e34b2bcf47ea1a6836885c49b30f69095235aae7753df76ad9e1b80442c70831b71e67d5cedb79649d394d4ece8ab87a2

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks