Resubmissions

02/08/2024, 12:16

240802-pfv69s1drg10

02/08/2024, 12:15

240802-pe6ava1dra10

02/08/2024, 12:14

240802-pefp7a1dqh10

02/08/2024, 12:06

240802-n97ays1dpa10

01/08/2024, 01:57

240801-cdsl5szgma10

General

  • Target
    bfc092b384976e97153bae0e29359461bfd65fce5ad8188d6460de57bc680eaf.zip
  • Size 20.2MB
  • Sample240802-pefp7a1dqh
  • SHA256 bfc092b384976e97153bae0e29359461bfd65fce5ad8188d6460de57bc680eaf
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • stealc

Botnet
  • hello

C2
  • http://85.28.47.70

Attributes
  • url_path

    /570d5d5e8678366c.php

Extracted

Family
  • xworm

C2
  • schools-copper.gl.at.ply.gg:14154

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    svchost.exe

  • telegram

    https://api.telegram.org/bot6887301557:AAE2e7AcjyzPeaHQb_2XBthrT3TTCKt7jCs/sendMessage?chat_id=7045481276

Extracted

Family
  • redline

Botnet
  • 6951125327

C2
  • https://t.me/+7Lir0e4Gw381MDhi

  • https://steamcommunity.com/profiles/76561199038841443

Extracted

Family
  • asyncrat

Version
  • 0.5.7B

Botnet
  • Default

C2
  • 82.65.19.134:4443

Mutex
  • AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target
      1/0178b79bd084c2597b2de4e62e61a88bb8359e4fcac2fe672bb887e0e52e5dbd.exe
    • Size 678KB
    • SHA256 0178b79bd084c2597b2de4e62e61a88bb8359e4fcac2fe672bb887e0e52e5dbd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/0280cde4a65664a05361129dc1cfa10bc17b3fa9567103ce6eb9d07b06f8f160.exe
    • Size 1.3MB
    • SHA256 0280cde4a65664a05361129dc1cfa10bc17b3fa9567103ce6eb9d07b06f8f160
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/08b7620610fc30c54e5cc095a54ae6d2949f68b0f224c285283e1612c254ef65.exe
    • Size 161KB
    • SHA256 08b7620610fc30c54e5cc095a54ae6d2949f68b0f224c285283e1612c254ef65
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/0e4fc438decc9723b89bd0e71b9ee30c1a8390e697d790b2d5ce96e94accd791.exe
    • Size 389KB
    • SHA256 0e4fc438decc9723b89bd0e71b9ee30c1a8390e697d790b2d5ce96e94accd791
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/0fb86a8ba8fdf57990c283080a671c1320cbcdfd0e8b5f5a250d9c38a6fce305.exe
    • Size 146KB
    • SHA256 0fb86a8ba8fdf57990c283080a671c1320cbcdfd0e8b5f5a250d9c38a6fce305
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/25898c73a877d87ba289bb4ab9585eb36eba9d27d47af678a86befdbf9aa938f.exe
    • Size 1.0MB
    • SHA256 25898c73a877d87ba289bb4ab9585eb36eba9d27d47af678a86befdbf9aa938f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/2c2e949171d86da9b5c58901de2e4a99c4fe86fe92c47556f53b833ce77c503c.exe
    • Size 338KB
    • SHA256 2c2e949171d86da9b5c58901de2e4a99c4fe86fe92c47556f53b833ce77c503c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/2ef0f582367a7674aef245acb06977bf646419f1f8d05c7fb07881a6102f982e.exe
    • Size 338KB
    • SHA256 2ef0f582367a7674aef245acb06977bf646419f1f8d05c7fb07881a6102f982e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/39884fc02ed9a51ffcc9b298916be79307f15f1518b6ae2021dd07af0aeecb82.exe
    • Size 3.3MB
    • SHA256 39884fc02ed9a51ffcc9b298916be79307f15f1518b6ae2021dd07af0aeecb82
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/3a72ecec34a29f53a1d73677a0e6f4c2e19087a32f1808f8f4ff643f62128d8a.exe
    • Size 487KB
    • SHA256 3a72ecec34a29f53a1d73677a0e6f4c2e19087a32f1808f8f4ff643f62128d8a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/3bfcb4f798ba63a1d18887cb67c90e083d5561a58136a892bd9944528c707671.exe
    • Size 731KB
    • SHA256 3bfcb4f798ba63a1d18887cb67c90e083d5561a58136a892bd9944528c707671
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/4103411f7bb66a033f9f5ce35839ba08b2a27d169e188a911185790f3b78bbf5.exe
    • Size 109KB
    • SHA256 4103411f7bb66a033f9f5ce35839ba08b2a27d169e188a911185790f3b78bbf5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/4e0fdb84649ad15a0722789512aaef15c7bfbc4cab82b2a7b0ea52ac9594bb95.exe
    • Size 1.2MB
    • SHA256 4e0fdb84649ad15a0722789512aaef15c7bfbc4cab82b2a7b0ea52ac9594bb95
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/5297372fe85eea3ecc0d271b5567f2c7ee75bd3a04e745debddb04c9b05dae33.exe
    • Size 719KB
    • SHA256 5297372fe85eea3ecc0d271b5567f2c7ee75bd3a04e745debddb04c9b05dae33
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/68292f388207f8ec69774dbad429e67420881ce46ecfad55f23182ec3a8893e4.exe
    • Size 765KB
    • SHA256 68292f388207f8ec69774dbad429e67420881ce46ecfad55f23182ec3a8893e4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/6da4696b804777582ae586a4e9f42f6c18ccf540222d70dcf3374ee291e674e5.exe
    • Size 2.1MB
    • SHA256 6da4696b804777582ae586a4e9f42f6c18ccf540222d70dcf3374ee291e674e5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/7021c9cba6c224272f01d04450c6c31c93857a21feacfa4295a878a4d7b04378.exe
    • Size 45KB
    • SHA256 7021c9cba6c224272f01d04450c6c31c93857a21feacfa4295a878a4d7b04378
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/752f5cc5a7b0f986286d09e8288c0958bc1b798477ca0d09dc2658c7ab109060.exe
    • Size 2.2MB
    • SHA256 752f5cc5a7b0f986286d09e8288c0958bc1b798477ca0d09dc2658c7ab109060
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/7c7cded8d1c0784881859ed03340d81c24ea9bf5d9972963cedf0e40b9856a0c.exe
    • Size 337KB
    • SHA256 7c7cded8d1c0784881859ed03340d81c24ea9bf5d9972963cedf0e40b9856a0c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/97d29ffc3556069c807b5c0ae2e2b109ae329feafc912d64f8b7f437bea47d84.exe
    • Size 778KB
    • SHA256 97d29ffc3556069c807b5c0ae2e2b109ae329feafc912d64f8b7f437bea47d84
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/a306cc84c907d6d57af300d1181128b24ca03e90c38ca7df7e84d35e80a63e03.exe
    • Size 1.2MB
    • SHA256 a306cc84c907d6d57af300d1181128b24ca03e90c38ca7df7e84d35e80a63e03
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/ae1a168ff481173d18034d14a767c0801458e95cc3016dc8d82212d0c083a474.exe
    • Size 5.7MB
    • SHA256 ae1a168ff481173d18034d14a767c0801458e95cc3016dc8d82212d0c083a474
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/b13f23643fddce3f41b6908a00051b6688788668c81d698994c140bf6290c2d6.exe
    • Size 808KB
    • SHA256 b13f23643fddce3f41b6908a00051b6688788668c81d698994c140bf6290c2d6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/b2a1d168dc4234e687d0969b6a1901ac7e69c0d4bb72a1a4c76ba67fa6a14f9d.bat
    • Size 2KB
    • SHA256 b2a1d168dc4234e687d0969b6a1901ac7e69c0d4bb72a1a4c76ba67fa6a14f9d
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      1/bb29aeb6ceecc37829b40e36f91a4620d7e0aae16b1ceea70bb70135e11172bd.exe
    • Size 759KB
    • SHA256 bb29aeb6ceecc37829b40e36f91a4620d7e0aae16b1ceea70bb70135e11172bd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/c8e5a24a6d2fa68d7976457a19576b381e6211202500af5280b0f3b256446bf5.bat
    • Size 2KB
    • SHA256 c8e5a24a6d2fa68d7976457a19576b381e6211202500af5280b0f3b256446bf5
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      1/c9736cdc4ade9fddb9b293e0366f182f972154d98169b58e532b7905c310bf97.exe
    • Size 541KB
    • SHA256 c9736cdc4ade9fddb9b293e0366f182f972154d98169b58e532b7905c310bf97
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/d58780d1d574bfe77c6f9cfad1cf4b51522231b2699081befd5bbd15f7309aa0.exe
    • Size 691KB
    • SHA256 d58780d1d574bfe77c6f9cfad1cf4b51522231b2699081befd5bbd15f7309aa0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/de19e0163af15585c305f845b90262aee3c2bdf037f9fc733d3f1b379d00edd0.exe
    • Size 34KB
    • SHA256 de19e0163af15585c305f845b90262aee3c2bdf037f9fc733d3f1b379d00edd0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/e886016e48bf0e3cd100d627678f345743509fd5f57f3c9b182f2833352bd451.exe
    • Size 338KB
    • SHA256 e886016e48bf0e3cd100d627678f345743509fd5f57f3c9b182f2833352bd451
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/f0f496eccc61594c53ded581b6683a77072f607ab018ec0a770a0aa7c7f45ff4.bat
    • Size 2KB
    • SHA256 f0f496eccc61594c53ded581b6683a77072f607ab018ec0a770a0aa7c7f45ff4
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      1/f28599b06560617bccdfb56acc841f3e642ff51b9956632fcc4204f026711e23.exe
    • Size 146KB
    • SHA256 f28599b06560617bccdfb56acc841f3e642ff51b9956632fcc4204f026711e23
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Matrix

Tasks

static1

hello6951125327ratdefaultstealclockbitxwormredlineasyncrat
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10