1b286678c8cdc68efc2c36261d6d898c456e24ce5fcc9e881423ba9402849037

Sharing

Copy URL

Twitter E-mail

General

Target

ollydbg-script-master.zip
Size

2.9MB
Sample

240526-3enmpagh52
MD5

5a1ae52699087523160327337385fb8f
SHA1

914331d07a02796fd66622c5744dc0a5b9a934e6
SHA256

1b286678c8cdc68efc2c36261d6d898c456e24ce5fcc9e881423ba9402849037
SHA512

f153734f85e1efb91e7f5b34eb5a16dfb55bac9d67b5cde93367e48f85f11d78646cd1971f34c82b242ba89d5a247fc84f32a449c970c064aa08864512536d29
SSDEEP

49152:2v/R/UmXuT2rCCneUv5QQ0vF2vPGLl92S1b0lwZUJD2MVIL8dNjGU7:2vZsOuyrFSt2mpLJpUJzp

Score

3^/10

execution

Malware Config

Targets

- Target
  
  ollydbg-script-master/Armadillo/ARImpRec.dll
- Size
  
  204KB
- MD5
  
  814ca983955e019c14d3048bb4d23d41
- SHA1
  
  a3d4459f8b3a2e5d1b2c092fa2d277ddb67cec33
- SHA256
  
  20af561bd1de340076f6ab0dd677bdd1d61a0ceb239c4c6361941106cf8d4620
- SHA512
  
  b88114f92979b48f26cc3fc6eb81b566fb05e580f29e4896326187d4831487f6b57fed99ea60056b0b3ef7096f2c329fbf59db45f053df651d07f2e3ba92c360
- SSDEEP
  
  3072:SZCt5jcRQP58902q2Ajrm3/6RP8pGuZeacSQnHORFywejvoGzfaxQchTBfN4Ivj+:0JR4EoTrXCWvNzCx5hTBVzj
Score

3^/10
behavioral1 behavioral2
- Target
  
  ollydbg-script-master/Armadillo/Armadillo 9.64 unpack script version. 0.1.txt
- Size
  
  51KB
- MD5
  
  f6fefe89c7f7beb24bd12fa6c7f4dd74
- SHA1
  
  717641ec9574000babd3b84321ab8e82707cbad5
- SHA256
  
  87b8e8f9f3f6382f79d340aa27b954417c95660bd8204180e5bdb36be298f776
- SHA512
  
  38a799cbdfb17569dc1aed902f9f948f78f6665c35d732f346fc2cce4e55e3f38b26c66e2ead6a12a2f653de78d184e0be46c0e7b7778be739807f708e9a2965
- SSDEEP
  
  768:DwU0xfQp6aPZ3Ft4FsoFcK9UwUlzlolHlecq3KFHuicoOHiEQRfWd5sf4QZ5awbG:90xG3PJrCFYWZ5awbqH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  
  ArmaDetach.dll
- Size
  
  5KB
- MD5
  
  b5ee7f1006d347deeffeb8569eb48d96
- SHA1
  
  544c76f21ede2782b787b8e4fb26754d64db8d81
- SHA256
  
  4eff066d97e605559c6bb10820c542ede46a9be7a1b331e8138875f86ef7f9f1
- SHA512
  
  1731ddb8aac7058381d1c9fea8c94c13c2ceefaf199888373ff2cb99ae62d4f5161e35484dcadd95a379d39ffdf44e62136a12f4077ca44b97695ccd727291be
- SSDEEP
  
  48:qizP9Ruqkl0CLMUaapfev6zIGEI3j+HpfLVxyr8odvVewv1EU5cz9l7XdZ:zP92LMUFpmSko3QpBxSVe52GjZ
Score

1^/10
behavioral5 behavioral6
- Target
  
  ArmaDetach.exe
- Size
  
  10KB
- MD5
  
  703c9febb974c51b651cdd9a7e8ec0ba
- SHA1
  
  4857d1430ce9c0738f330fc3afede3e0bbd2b249
- SHA256
  
  569bfac4789715b87c87a6848a1e3a7cab45c638785fcef3815c5fda46b93390
- SHA512
  
  33428703cdfb4d233e6158dbb11b70db4908dfed7d16623ac7b680bd88cbdc4d7f39935a9889dc435cb05ddee72d57bcf342386aaa3c2a187a4bde9f68784871
- SSDEEP
  
  96:jixEfwc9ZcAACzYHC6s7288t6tGvlsWkTB6rHoro5KXP7GDn/5PqfFC6OgkNAy5F:kWwOh8k23fkoIrocwBUC7gk+0vTWs
Score

1^/10
behavioral7 behavioral8
- Target
  
  ArmaFP.exe
- Size
  
  17KB
- MD5
  
  c71e80264bad4edeecec515cb5c578ad
- SHA1
  
  915cc2b541a04a7175449cfb82dd00343af76b85
- SHA256
  
  22ca14e806a48a433df3ff1a8aada7db0f3eb94ee14fa5398d956f82d0d965ba
- SHA512
  
  c50c3d283bd70b8d7c6c18932a76b8fc8c1a1813eabed8ff49ed40a7345760482e2f49f286d4bdf5ba1e46a9a437bad7886cb58519c7e25055d748b634fd72c1
- SSDEEP
  
  384:wmuhDKfNvYa/t1j+Qy10fnvB6s5GM5hNAbdY:whF+9tjy+vBjGPdY
Score

1^/10
behavioral10 behavioral9
- Target
  
  ArmInline.exe
- Size
  
  104KB
- MD5
  
  e41e36f8ff4e6a5a5a2cc1ddb093d931
- SHA1
  
  5978ba919ec9ac05a58aba2b2fbf781ecce69a17
- SHA256
  
  325631e862b7a6450f3a4722e620ebfddf7161492579c78f5dcbed008ef5728e
- SHA512
  
  9b6dd09c771cb255becd324d3b5f9de81dfe2b4956dc57ed44ede6eacef06b98a06349bed91724597c0f3951e06ccbfa66b90b293b34ca5bf9c13ce31c335bd8
- SSDEEP
  
  1536:M5CnlkDpfJnWJyqTqgqW9wCT/QWGLAVlScbhPKdWGGgZsnFAe826sz7Kv:Mi9qW9wCT/rGLADScbhPKJIFR82Lz7M
Score

1^/10
behavioral11 behavioral12
- Target
  
  Disasm.dll
- Size
  
  32KB
- MD5
  
  0a33308bcabe87a567078495b67c4872
- SHA1
  
  d12ec1918ebafa31f23eebf073159ff13813c9b5
- SHA256
  
  73335273537b19deb315df11299f8cd80561bc9af153c6498559a928f0bcd460
- SHA512
  
  75ce679c6812836d4c91aab05c10242291cd5dbe3e0bc1c45029f8c51fd4e1b9645fc5d04eeec81a4b14bd427a69e39236868094337834cfc2919ef2c8e6dddc
- SSDEEP
  
  384:8+C8MiTtP7N07cwnYBR75D7naedkQiVHcuyBSlsm58F86yxioOl6VyQ7Vko:/Zh7RwnyvnFk0lCGOI16IQ7Vko
Score

3^/10
behavioral13 behavioral14
- Target
  
  NanoView.exe
- Size
  
  28KB
- MD5
  
  eb51b1b322fcb37599de1099955af1b6
- SHA1
  
  8ec6802c2518723db338258d5330629a415bbd65
- SHA256
  
  9a3ec0f6f244fb0f3aae59127bc6d794a86f3ed1f25967069a476bef7e72ad63
- SHA512
  
  dd871e80345057ccaf7aecceb82253e15aacfaa5b40e0fc3fb9753baa920e0e808cd6d8535f582e4323e0d4388042d8c6165a0da0a732626904dec27fbc59e9d
- SSDEEP
  
  384:/T5wiY1/0QA+Uy0FeJ7Ao6FsOQen23WynRTW:/Nde0QPUqJkhZQVJtW
Score

1^/10
behavioral15 behavioral16
- Target
  
  Nanolib.dll
- Size
  
  64KB
- MD5
  
  c50198b0f9c47d3c886bef4c5b890d7e
- SHA1
  
  04e9037f7fb3da2b7a416c341c89ffa5e558e50c
- SHA256
  
  923ba4b6fe82e8a76363f791cc10a3aabb4eb3e7623cb944435cab9ebe8f4c7a
- SHA512
  
  764d5e2f83c6d1ed09b63690ea2c5cf2bc15aea5e72d3aa56649405ed064f227b262b153ac5cba059d4814022f1167c49661958fcde0d50533ec07119e919c82
- SSDEEP
  
  768:LylOd0rEZQ0PRKfZXc3vpQYrRFbuRwl7IQEtPD7+t6s6phDiumcR:Ly8SGQUwXwBQuRFbuRwhIRqtADio
Score

3^/10
behavioral17 behavioral18
- Target
  
  ArmaCRCStd.exe
- Size
  
  11KB
- MD5
  
  25466b44e42dffbbb0e626d0bf79c279
- SHA1
  
  67fa527020ff7698ba7f048ef3b94f308ad025b3
- SHA256
  
  dcd7c8ab9dfb0abf0e382c7349042cc56d41b945e5a0ceb19f3b5dcc6cf5ca8e
- SHA512
  
  ca8229053ed7a57763cc7633f1a06d90320dd0e9b4e89a0dcc27cd96539a21d93ce418a209aa01b5831a3a261fc61f3090e1cd5350bea83e2843e4fe0db1cee6
- SSDEEP
  
  192:bbJhFLn3qPp7FXNbJiDzrvshyGKHFLBsix8oh:nl3Sp7FXWzrvNMiGo
Score

1^/10
behavioral19 behavioral20
- Target
  
  DllLoader.exe
- Size
  
  8KB
- MD5
  
  06d9392d71aa66f54fa0bc7c60506fcc
- SHA1
  
  6dfc29445073bf586277c624716d6ed04c2de4db
- SHA256
  
  8c11a96706509fcdf7c931b75f4603a6c768b77013aee0b227a15f1cf1790875
- SHA512
  
  8d62ed34d207016e3251768a42f7bfd3d0686fa542acecc22dd5e1afa3444b8967981383158f67b2bb328556adeeec98bad6ee632ac839e5395e3577502515cb
- SSDEEP
  
  48:OEwMjBmuVms1SRRUMT84Q2PsAJzB0YgSJDI2rsviF/5eiEZx:ntgqmCCRUMT8X2U2zrsA7E
Score

1^/10
behavioral21 behavioral22
- Target
  
  dilloDIE.EXE
- Size
  
  64KB
- MD5
  
  30e82d43f1016597067ca35fbfcd99fc
- SHA1
  
  6bec160d8984a5c2f58064e9ffde53aebf6b5722
- SHA256
  
  57294540a5147cf9452b7aa343ee67d73c3f5ffd22a62188183fa36cde31cbf7
- SHA512
  
  fb5822bf1fbf10a325fe6cb763f85e7eaf24be375bd13f3d21250f34926dc864a4558cc17ee66a74b413da5533160b43178e30fa6045aeb94dd3fab69b2e03c6
- SSDEEP
  
  768:+s56r/UdyRSFM1HxXq8ix35Vmq5e+iLnvkPW9S0baNSMtbY494Ych8rpqaZza:GnGA4gu1PcCR9a
Score

1^/10
behavioral23 behavioral24
- Target
  
  DllLoader.exe
- Size
  
  8KB
- MD5
  
  5ffd0c4da9e267786bf8f295a7b8aec0
- SHA1
  
  a66926f97dc90876a0a01c5a9e16736ed4306096
- SHA256
  
  5423627a5fc9696800780f57cda2fc6cd96a660e34b6a025727a3db5be05b5f0
- SHA512
  
  5f615dda5a0fec0caea8737365123103eafefa3fc6d6f94b4858b40bf8aa029514e106a915c08a7ff360e63a200326981785d914bd8674c8be379c9a13b180d4
- SSDEEP
  
  48:OEwLjBmUhHXq+njd33uyeFoWw02R1LkF/5eiEZx:nIgUhHXq+RJeu5L+7E
Score

1^/10
behavioral25 behavioral26
- Target
  
  dilloDIE.exe
- Size
  
  211KB
- MD5
  
  8e2d0019114f48217d6489c7125a7852
- SHA1
  
  f10122873bf36028cbcab3ae61077582a79daf04
- SHA256
  
  37b66599b5ddbe286498a977014dec953b8c3b303c18569451fbf293b5427893
- SHA512
  
  71e97922af86ab0f4516fb0abece95b06b962da1f6747a696434f5af12d175d1470c2009e94697087564377f7876230de9789f775c79efdab3accb617f26fd0e
- SSDEEP
  
  1536:m/JylRtMIbzodSu6FdFyoKBfaW84wvuAVgUD3VjhjVM2jpw4BByN678M12k15ux6:m/JyNbSSbFFga4KVH3hNpFTRwk1LhEQ
Score

1^/10
behavioral27 behavioral28
- Target
  
  ollydbg-script-master/MoleBox/MoleBox 2.xx Auto-Unpacker diy by：heiketian10/filelen.exe
- Size
  
  10KB
- MD5
  
  f425b56ba0a3baf6ad403d3948b126ee
- SHA1
  
  1cc4354cf11d23d83ba81d587d7280ff301502d2
- SHA256
  
  d3c59d84f96ccf10deae08d68366506cb4a293a79adbc10ed7d2b4249633b31d
- SHA512
  
  5e7d4d5c9f9d51667be4512a2fd7332d800ad1101b643cf54888bc27711031354960acd7d89e0a01465cc01f744636ade2c3fddb1b8f8015056b4abda60b66f9
- SSDEEP
  
  192:62OCPRYAIz9xvqlX/SlKkde4DbKiNaWknq143Gh:6QlIbvqcltc4DbX142
Score

1^/10
behavioral29 behavioral30
- Target
  
  ollydbg-script-master/MoleBox/MoleBox 2.xx Auto-Unpacker diy by：heiketian10/mbunpack.dll
- Size
  
  147KB
- MD5
  
  684150ba77ca90fa6fdf405a848b2c7f
- SHA1
  
  ef3d69ea443b9b7d2742418a1207eea62b5d5500
- SHA256
  
  3fa5d1235af2b53c17a7dce32f19f663e2bfb84efeffebb32f7285a5555335a8
- SHA512
  
  c3c4972ead42383b646926ff422fe353b14c43ee01f235c544d44acb8b7dee7e4ff7a905d3fac70c62b7296e393dd06c7d68392313ec518b1a55fe95fc849720
- SSDEEP
  
  3072:e0I29s4CurXqp83OPe8y5fDdHglgQHBhMN9EmygwYCDkx+Is8pGGW0:lHt1rapedRDdHgllbCFtwrDkZpTW
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32