72b7069c3950d4241d0f4849bc108122e51e9b147718bb33c4b3cf75d93a966b

Resubmissions

19/06/2024, 02:16

240619-cqfhcasbnh7

19/06/2024, 02:10

240619-clsbcasbjf10

19/06/2024, 02:02

240619-cf99zasapb7

18/06/2024, 09:33

240618-ljfdfaxerf10

Sharing

Copy URL Twitter E-mail

General

Target
github.software.1.0.8.7z
Size 135.8MB
Sample240619-cf99zasapb
SHA256 72b7069c3950d4241d0f4849bc108122e51e9b147718bb33c4b3cf75d93a966b
MD5 37623793e8d363d3c7ec63b57737462e
SHA1 bfeed301852e5ea64051a3d7fc1d73b303de220c
SHA512 22639f1906c72c51a2d75e7ae6d573efc6894c8c00b1ca6360d51d0e38d5fd3ae55643a4cb1b51e750b404d7d9c3953890df42c5c28dce7b392a0c00eda5f0e6
SSDEEP 3145728:b9QGyaIo+jeGCDixKB24YDfda8YL5zExNfE5xa/LMmQvob19tmWm:b9Q1LqmfXYLiFtDmy19cB
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  github.software.1.0.8.7z
- Size 135.8MB
- SHA256 72b7069c3950d4241d0f4849bc108122e51e9b147718bb33c4b3cf75d93a966b
- MD5 37623793e8d363d3c7ec63b57737462e
- SHA1 bfeed301852e5ea64051a3d7fc1d73b303de220c
- SHA512 22639f1906c72c51a2d75e7ae6d573efc6894c8c00b1ca6360d51d0e38d5fd3ae55643a4cb1b51e750b404d7d9c3953890df42c5c28dce7b392a0c00eda5f0e6
- SSDEEP 3145728:b9QGyaIo+jeGCDixKB24YDfda8YL5zExNfE5xa/LMmQvob19tmWm:b9Q1LqmfXYLiFtDmy19cB
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  Xmls/wigging/lory/pageant.xml
- Size 21KB
- SHA256 e336502863f149f78ed63f3298c4e8944b9d23431db24f85f9f85515b0755e63
- MD5 69f0ece24e33af8b1b660b8aeb66b6e3
- SHA1 66852e35e7835af83775ff50f84cb11e7d202beb
- SHA512 0204be53177bfd67860474f29f89a825fa50ed9d151a7e22f1d90bfb3f10b50af93d2dd335b04797a45b14c687c3880c5de7eec0c65b36e6c4d0460c3154a029
- SSDEEP 384:z5V+HNQ94f5XJCdZL8OAAyVlKjQGpXQXKkkcwe2JJWVAZLQ9E:v+HK94idWOrIlK5NQXZUKE
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  Xmls/wigging/lory/staning.xml
- Size 1KB
- SHA256 47a4e23d766c5a215e1630d88df7a324c23413b78b734db0a93f383446827d59
- MD5 8c32f3e20652ee31fecef4e8f54ccca4
- SHA1 e9aa2220c2bad524d575bd2fef7ec57237e6047e
- SHA512 8edb716b278b44a7db8236f04fcd58654614e69390a38852ec1122636014948130a2fd932c71683159a476d93b648a5b198ba047313b8fbae8693965ebe808e0
- MD5 SHA1 SHA512
Score

1^/10
behavioral5 behavioral6
- Target
  Xmls/wigging/lory/thread/expt.xml
- Size 6KB
- SHA256 eb6fbc98db8c45faddedce77e5481aaadb50b29b288c2b36b93cc2282e6031aa
- MD5 b7cc6fc7d7716020fde51cb2c7bbe181
- SHA1 038e02ebd0598205d4fc4b64fc64883483628270
- SHA512 8e06df62212a6cdbded2fbd4417f75d194476fa3aa48bdc409e51cf022ffffcde8e083a86309061153d0a45cc3e88078a3305da4ce61198532c596f7d506453d
- SSDEEP 96:Di0xqwJ1x+jY6BmNU+6Es1C8KeZe8UY3blO3WUQkWxv3bWrI2OXl/d5Dq52w:DPvJ1x+8cmNx6N9U/3WUQ/bjrXll9w
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  Xmls/wigging/lory/thread/maenad.xml
- Size 4KB
- SHA256 b602f18ef443045b4413f8d56d78bd874427de4cee3c5a4ec15c45cd24ca441f
- MD5 63086e3a3f07e8b79f8bc8c04ed7c95e
- SHA1 199533f4a05fe81345dd37c52dc212134641a5fd
- SHA512 5793ed3fcd027cc2b82f5c9b3cdec6dda6c20a3bb50ed8f4bdc9fc2cf297ed3f018e97166a4fb6f7c8d2861a48391b76878f3ae0a630d2061be29145141c189f
- SSDEEP 96:IkmnV38KOwbeqyizuh3CNglscnbhguKzK8N53uqlNF:/m2KOwqqyWuhykscbhguK+K53uqHF
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  Xmls/wigging/lory/yuch.xml
- Size 6KB
- SHA256 796a8bc2fd1ebd58dbeeee50211764e02cd2eaecbbe9ade100758be521a7d754
- MD5 4bc8f3d7af288bb5a7d01a425d996170
- SHA1 0363ead5cfe80ebdffa93e41fbe8f6da52addee4
- SHA512 b70b70e94358a3623c1740a0abc8e6abbd512a1569ddad62530712a50d33e94447f42e5304c4317c5386cd09ab8686cc9aee7b5e433643b2381fe5f7bdb75ebb
- SSDEEP 96:Fn0RqsbmjjUYoNuKIGHWnZfiWgOkHEefaeY3U8YhX2DEJC9rXg3Ql:Fpcm/UtsYoZfzOEA+fYhX2DEJGg2
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  Xmls/wigging/nibblesRebarDiswont/dealtMailers.xml
- Size 22KB
- SHA256 ca1a7bb2f9e52a9259f3abcf93c68a6cbf8d6bd4eab829c079634a734a5406d4
- MD5 dd9407667419962ce91dbf01dc505007
- SHA1 5b18b64c99597910cff1b3347ea8df1caed829a0
- SHA512 c1f88c492543d399c3ef7d81f13851681b663f5c17285de62c372cdeb12cc1dcf31b62bbc27913e05c8635419006c3153536035517c4693a7ec06132fd5e995e
- SSDEEP 384:odjrUGaRLdzXZuVJd2IAfy6Rb1df++XfCNsnu/TWIpGAksn7fSF+Jc3ck9YY+DP3:odnUHRKWd5zf++XfFnuyLcjVDP3
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  Xmls/wigging/nibblesRebarDiswont/informGadusEllinge.xml
- Size 16KB
- SHA256 5acd3c4ed35e63a7717583e9f5d382892fe83a56150256844b8243e857347041
- MD5 b6e47cb155e7fb4de1972c19b965c24c
- SHA1 2a4e3c7b585bdcb9c4081fd853ce38d786d63510
- SHA512 7321aa5da528c3323f36781d6c84b4829851d00a8c7a058578852524362f46d6ffad52846e00f68e43212f2af16c220a3333f0e87c6e810e6dc9837641c356b8
- SSDEEP 384:rpgNqfO7ZXiQgaHCE+3eYnWw5S8da7OdIRu3ngJUBY3BSKhiD:rpg8fO75VHKO1OdvXRBY3IqE
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  Xmls/wigging/nibblesRebarDiswont/oarlockNiels/auguredGalochCarr.xml
- Size 7KB
- SHA256 5fe07c8fe7706c9ffd3942a83773b218f14fa58a57d14d508916b55ac654a845
- MD5 f68bbf99e2ff1afda0d79e5e88cd5998
- SHA1 2feaff3e6b93f421c7a7a706241f9735f7299441
- SHA512 e6d9bafcd388c953979411ae618f6fd7e6391a0eacad2f0ba9849f8f1481eb8b227f9a03b2708318a59b8319d727b132184c5b8b05bc2b2c0227a1eb3570ebc9
- SSDEEP 192:xnWdGAvOpGlBwYKVLLPgs+tjOnTUn83po3N:1WEzhvVLEfgpo3N
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17 behavioral18
- Target
  Xmls/wigging/nibblesRebarDiswont/oarlockNiels/aumCalla.xml
- Size 8KB
- SHA256 b7afd4b72667e04cc5ef07d9c8bf49e9491eb578eb1ae583829fde8db841d674
- MD5 d0b9654d113e690351b0c02fc2f59d6f
- SHA1 39d376f7644656177ecf98b508c235ff7d965da5
- SHA512 bec75ebc09d235678bdabe4ba4ad9137e3368bd9da555548b24da3ad261047aed1d9d265c4a264977dfe04f1e732c321f9c56555b042f1881f930ea44710b0a5
- SSDEEP 192:xKFAWhdVAKipCoq4JW81jVCWlmeaoy+Iq:GoG0SWlAoyxq
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  Xmls/wigging/nibblesRebarDiswont/oarlockNiels/banishAdonParents.xml
- Size 8KB
- SHA256 09f7ad430fafe576997883a1ed70b973a765334053fc0af3ec0558759b342676
- MD5 1899634b43676b2b6532b3ff6aaaa47f
- SHA1 38be85ed54927e970b0207d782f227642f4df52b
- SHA512 897d773ae282938d4ae2a749607bc678b881edb3a8d5c3bfde62a84866c13bb7b5c719a6b22ec8f99bf83f11915f10b46da5d2a3c09240059e67857b1fc62f1e
- SSDEEP 192:3+xVgJzTrpci3zLxVjN0qTZhX0p9hkuDzilvyo8G2:3+/gRVci3pV5qvRoyoR2
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22
- Target
  Xmls/wigging/nibblesRebarDiswont/oarlockNiels/feofferSkybalSooke.xml
- Size 82B
- SHA256 90ac27c265560393da82817e791ee69df45685e14b875657158d3adb78202e2c
- MD5 36466cdd5c3b9a4a075af09064b2b51e
- SHA1 3976af7c07bd7d7cd48949679fcfc83db2363557
- SHA512 0f30a7e513db1bbefeb609f2312878820f1ceae458659ad93bcd2260b0fb4a73bef816610228401f5147880af0baf555c231f171ec58fab4247e8d94ab643467
- MD5 SHA1 SHA512
Score

1^/10
behavioral23 behavioral24
- Target
  Xmls/wigging/nibblesRebarDiswont/oarlockNiels/geckingTwitsLagers.xml
- Size 8KB
- SHA256 35f31559e1045190d53bc203887399fc2b87cf801c8c0785e038413cabfeaa93
- MD5 b12b2d39a3f9dff12711b26f64cc2057
- SHA1 f1117fb7ee7efd56282991b977296a8446a7dc84
- SHA512 fb50a1fc82518a09dd19f74afdb6577f10e7a61afef1f583be30eb012d2ccf4272b155851983254739b8831178612e95a36bc8083748ed72595242d78961b801
- SSDEEP 192:cVPMVXydrRcrM1jHu/W/C54N0VDwLQ8QBm7xgY4QReaiHNWrR:IPMFyaybu/HuN0V0L7QEmzQRsHNW9
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  Xmls/wigging/nibblesRebarDiswont/oarlockNiels/irking.xml
- Size 194B
- SHA256 c19d24b01d800b200f1975dd56a95608ae5799cc26fdc387917d633125871c81
- MD5 657e1d114973d76b035bc195b373fad8
- SHA1 50558847b451509354336a3bb81de888f4943bdf
- SHA512 e385f5d8e416a187dde2cd99fbb596867113b15360c87f13f0883a1c981786b9b80e58246bccf4be968b778428eb5367e827d05e3c3769698c29f78aa27acc79
- MD5 SHA1 SHA512
Score

1^/10
behavioral27 behavioral28
- Target
  Xmls/wigging/nibblesRebarDiswont/oarlockNiels/lipidicCecile.xml
- Size 1KB
- SHA256 c57fb2062049eb0c9a0428e11baac1004cc589e7baa9da077e17cdfc43d03290
- MD5 54e88e7821ab7e09f1281aff2f7de79b
- SHA1 09b31743408c78493afcb8da9e39d6620740ca1d
- SHA512 caeaec30819e25174a7af8339daf2b4960b32e1ad0e9272bc6590a1f8840323bcd44805d6828b53e20ce48d10079a4681f85f00c9f2f029c276f44936d8b79db
- MD5 SHA1 SHA512
Score

1^/10
behavioral29 behavioral30
- Target
  Xmls/wigging/nibblesRebarDiswont/orphansInvious.xml
- Size 11KB
- SHA256 e4b770b882eef949745c3f98f8a430fa4dd521c05dd8ecd63f505917fb351940
- MD5 e5c43a2fb556b17109547b5a69779e4a
- SHA1 0bc63f7d1264e6d76ca96edebe570a1ba39ae086
- SHA512 ec08d676c16216de484e75024a21fd53827df1452e3383ad068247eed6f0843ca62d2b0cf1b733aff90cb0f69ba6125afe55f2c774c3e5087f218e68e8edbed7
- SSDEEP 192:TeCwV2YaDB56Aa7Tav7P+982UYmbVOqCuhi/cW0Tip0+denyDlSyMd0oMp:TedXaH6Z7Tav7P+eQ60MhixldBDlZg0x
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32