e85913facd7f49ef93b37109550786334c07fe465cf95fa61c1858467644421b | Triage

Sharing

General

Target

e85913facd7f49ef93b37109550786334c07fe465cf95fa61c1858467644421b
Size

1002KB
Sample

240726-a99t7ayfrh
MD5

d62549e743daa2261704a3af6076f54a
SHA1

e5790fc93c987c7ed8a25472e53360ae5fa5c3a7
SHA256

e85913facd7f49ef93b37109550786334c07fe465cf95fa61c1858467644421b
SHA512

fd28b71da74e46b50c0a34b3c94f8b52b3ef0991b7aaa493c524dce19c079a3db60fc258d779753d535e449aa9a276daad0d71ee9aa2f31d3125b28004e509eb
SSDEEP

24576:JGIa+/HwjDZFDU1KXzCafZMIwETCtsDa/i7EjEYFhkx:QE/HaDZFYswIDa/eE5I

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e85913facd7f49ef93b37109550786334c07fe465cf95fa61c1858467644421b
- Size
  
  1002KB
- MD5
  
  d62549e743daa2261704a3af6076f54a
- SHA1
  
  e5790fc93c987c7ed8a25472e53360ae5fa5c3a7
- SHA256
  
  e85913facd7f49ef93b37109550786334c07fe465cf95fa61c1858467644421b
- SHA512
  
  fd28b71da74e46b50c0a34b3c94f8b52b3ef0991b7aaa493c524dce19c079a3db60fc258d779753d535e449aa9a276daad0d71ee9aa2f31d3125b28004e509eb
- SSDEEP
  
  24576:JGIa+/HwjDZFDU1KXzCafZMIwETCtsDa/i7EjEYFhkx:QE/HaDZFYswIDa/eE5I
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/LangDLL.dll
- Size
  
  5KB
- MD5
  
  50016010fb0d8db2bc4cd258ceb43be5
- SHA1
  
  44ba95ee12e69da72478cf358c93533a9c7a01dc
- SHA256
  
  32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e
- SHA512
  
  ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233
- SSDEEP
  
  48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  12KB
- MD5
  
  4add245d4ba34b04f213409bfe504c07
- SHA1
  
  ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
- SHA256
  
  9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
- SHA512
  
  1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
- SSDEEP
  
  192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  1d8f01a83ddd259bc339902c1d33c8f1
- SHA1
  
  9f7806af462c94c39e2ec6cc9c7ad05c44eba04e
- SHA256
  
  4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
- SHA512
  
  28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567
- SSDEEP
  
  96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  bin/DemoApp.bat
- Size
  
  7KB
- MD5
  
  ea8354671cee46be984ae4495f6b0fa7
- SHA1
  
  2a15e1d4c55304f54a1367a938a190b3ac799b14
- SHA256
  
  2729e14fcf62fe43732a3d9b31ed50714c11788e253c0c6f164e0d6a47b86878
- SHA512
  
  06011729d89db02f635665856910d0f0c8c4ccc491ba0cdbd2ac69089b6738412ccd4aa5623cbbf4c4e817929197650589102aabfc603d64acb9ca2ab996dd33
- SSDEEP
  
  192:K0/g9LOdESeRXZ8Kl7/fAD1T1yBBjxDcDY6mjX:9g9LOdj+Z8qDfAnSto6
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  bin/InstallTestWrapper-NT.bat
- Size
  
  8KB
- MD5
  
  4da63a40896c3595c909b8b1a2e86806
- SHA1
  
  70d004d779b3f7edf796498f787a3706f3147d77
- SHA256
  
  f38faa2d251fa7568b9318a4e567a08b7179d3c82647661dde1bfc766101d79c
- SHA512
  
  7926ea6ed4ca237f39a342c3fa75afa283cad5a8d14eaaaa8e86849c676cce79ba49b475a0d9c2340809111a35ad5883bffd644bfcbb4de6bb9e940b826cfbac
- SSDEEP
  
  192:K293j3Fg9LEdESeReZ8Kl7/fAD1T1yBBjxDcDYamjX:Pg9LEdj/Z8qDfAnStoe
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  bin/PauseTestWrapper-NT.bat
- Size
  
  4KB
- MD5
  
  8cfac6a31703a54e9342b0200e750943
- SHA1
  
  f490b54a65b7a7eeac717960f346cbff3b8467cd
- SHA256
  
  b603d4404bb5d604679738b7c84d90965903401679978e5ae082363b1f562a3d
- SHA512
  
  798673d8e3ffcff6a010d4746041b78b0dcb86fd93e520c58442733735788deb9b4611e09251666e66eca7533222150c072d168faf162592ecb8c89bd8166797
- SSDEEP
  
  96:KsdtVMNIM6aFpgdWYldACta8Ku+7AqFpfJaDR3Q3mjX:KE/g9LEdoZ8Kl7/fgD8mjX
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  bin/QueryTestWrapper-NT.bat
- Size
  
  4KB
- MD5
  
  212606d4fa911ed5f680277277c19593
- SHA1
  
  89e3f4556aee5f809d10560aac1dde6073501963
- SHA256
  
  22903cc767cd6ed52869d9e1b981cb9a8ec3dff842489c738ec73f8bd5d01578
- SHA512
  
  3d4eab61c0b69b807dbe74530336d3e7b458de24c255b11bd94c2c93131d42204eb5b1983d0d8488f0b680265c3f70bd8a25d241e9b000397d7088309dc2051b
- SSDEEP
  
  96:KsJtVMNIM6aFpgdWYldACta8Ku+7AqFpfJaDR3QHmjX:K+/g9LEdoZ8Kl7/fgDsmjX
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  bin/ResumeTestWrapper-NT.bat
- Size
  
  4KB
- MD5
  
  740315da756dbde95065886c54e893dd
- SHA1
  
  68e1d3340caa049f11b6dda490de18ded682f7e2
- SHA256
  
  774d0185b95fea7f76008d73dc63d4577350a41503c95ca71a68818c3cae725f
- SHA512
  
  4df150735a8c4a9eb7c940aa70b522600ec58aca79eb184e98606ba11ed2cd819799b3b7300a2ee55c7ba9e9ed937a05a726f34fc03ca38fb3aa395c493b5168
- SSDEEP
  
  96:KsZtVMNIM6aFpgdWYldACta8Ku+7AqFpfJaDR3QbmjX:KU/g9LEdoZ8Kl7/fgD4mjX
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  bin/SetupTestWrapper.bat
- Size
  
  4KB
- MD5
  
  e3ea65005dd94ddd0621c4e5b5d0d830
- SHA1
  
  b1b7935f915f518a5710e0ab312e450fb37eec9f
- SHA256
  
  6bc7d70353f19db71f653a1a354a00d257628f7533e4e203a5da2606fc3cae0a
- SHA512
  
  56e7e56f3f4552f2bdfcd6a45c2ac68b47d00693aa595e08b6c8cd069c0170faa1db1029c7bd358e494e484effcd6eca4906f6809fd8543095c91f61a67567d2
- SSDEEP
  
  96:KsUh3tVMNIM6aFpgdWYldACta8Ku+7AqFpfJaDR3QqmjX:Kp/g9LEdoZ8Kl7/fgDrmjX
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  bin/StartTestWrapper-NT.bat
- Size
  
  4KB
- MD5
  
  9ea8ca0929e5aac12e8daa799531e4bf
- SHA1
  
  38bc93f6f3e42c4e0a9c43260dbe880e02bcdbc8
- SHA256
  
  2697a524ccce34ae9d740bcb1f044490a91c448ef228ceb947357ee8dedd9545
- SHA512
  
  b553a137db09c2aad959510a250a75e97f635be1c22e416c16d9e3a800103599fe219b83a55fd2d84ff4bc664dddd94c6ad54f844cbed895c68ee67552deb3fc
- SSDEEP
  
  96:KsMtVMNIM6aFpgdWYldACta8Ku+7AqFpfJaDR3QXSmjX:Kh/g9LEdoZ8Kl7/fgD4SmjX
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  bin/StopTestWrapper-NT.bat
- Size
  
  4KB
- MD5
  
  aac2285722fdebd6ced162f67cd9ccfd
- SHA1
  
  b5882bf862f6757459667c2e0e2ac52a8094b4fa
- SHA256
  
  0d37b12dab253853ae0d6456f67a9c513dbc80df930b9052a00d8f5b792a97db
- SHA512
  
  2fe2acc99d678d49f2c4c9222b6c0ccc83631d14cda746246bbf3c94925b1a35ffe5020a025fd674f57b86f62e1155975c6fc05a469849a70134c6ef774ed276
- SSDEEP
  
  96:KshhtVMNIM6aFpgdWYldACta8Ku+7AqFpfJaDR3QOmjX:KM/g9LEdoZ8Kl7/fgDVmjX
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  bin/TeardownTestWrapper.bat
- Size
  
  4KB
- MD5
  
  f7d119e09e9c0a71bf59408f7d34efff
- SHA1
  
  b8f2189cdccd1aa7ad4a48639a94114c72d3a85a
- SHA256
  
  5e5bac51d422a73ea812411b8483d15ad916a00b261e1c7f41205d1033097703
- SHA512
  
  c2c086e32e88196909fe17f3e38d75dd492750d3c75dfd393acca4b9ecd1c01cc60e242d320b316580f2bc453a69f1a259dec5ddec77b0be2647d9da494fe5a1
- SSDEEP
  
  96:Ks53tVMNIM6aFpgdWYldACta8Ku+7AqFpfJaDR3QimjX:Kk/g9LEdoZ8Kl7/fgDzmjX
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  bin/TestWrapper.bat
- Size
  
  8KB
- MD5
  
  a69213dd97d7d340b502f44f069b38ee
- SHA1
  
  4398e541fb830ba5fd3e37783295c9f71fa9831d
- SHA256
  
  93620c9b376ee75b708bb482ea998037df0384862b20ca9114f4e428ef322a54
- SHA512
  
  4d8315a85b7df57b49a5b9e6f24e6e2ce61b36be2f7170e98193ef600c0d6adad00b697aef22f22a6508d44c6bd2a117de217e3294c506f60b860d582a3e1722
- SSDEEP
  
  192:K093j3Fg9LEdESeReZ8Kl7/fAD1T1yBBjxDcDY6mjX:Jg9LEdj/Z8qDfAnSto6
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  bin/TestWrapperCommand.bat
- Size
  
  11KB
- MD5
  
  05e959802c847d798cd88561fcc5a218
- SHA1
  
  547c746f2158cd4491c2c76cf8b5f50247512175
- SHA256
  
  e021db42303252345636c176666b686338f47f082bd5b4c79158f9e4aa28a119
- SHA512
  
  4b2fb0709a7c2e3bd3916bb74e250ae18cd637a8b711fc7c010019650f291e6e20eaf18a5b4f91cc2ee88863909f505d03a4dddaf7cba10c8a852825ba245e2c
- SSDEEP
  
  192:KS93j3Fg93WiSeRw6Z8Kl7/+DvxQ/1yBBjxDcDYmgqZmjX:Zg93WJP6Z8qD+NQ9StokT
Score

1^/10
behavioral29 behavioral30
- Target
  
  bin/UninstallTestWrapper-NT.bat
- Size
  
  4KB
- MD5
  
  4569d27d6756c861d471400237b30264
- SHA1
  
  e195c8db2e0d39482d809866625bcd401f0f8519
- SHA256
  
  752fa29b0285cf064e210b3125853620126bea456c2d74b00712d00ee618883c
- SHA512
  
  f50f5bdab07812663d670dfddceb4d8d48fb9afc9bacaf86497f23828f381ababf9d72be7277ba763824a5e6c0d71b2ac6d2fa849d5eb1253ab10b630b49db62
- SSDEEP
  
  96:KsttVMNIM6aFpgdWYldACta8Ku+7AqFpfJaDR3QYmjX:Ko/g9LEdoZ8Kl7/fgD7mjX
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32