6f41a39c5139424091636080313b2b427f609c9a1aee0a6a698670555befaa8d | Triage

Resubmissions

05/08/2024, 12:12

240805-pc9v9avhnp 1

05/08/2024, 11:59

240805-n5xwqaygna 3

Sharing

General

Target

baram-main.zip
Size

4.8MB
Sample

240805-n5xwqaygna
MD5

b0c2a2102fe32acbbfbc6ebe1878f0fb
SHA1

03f96239204f7f46af815f5d2491ebd4eb925758
SHA256

6f41a39c5139424091636080313b2b427f609c9a1aee0a6a698670555befaa8d
SHA512

aa2008831d54650328a93afcb5e1c2785fed74026fc4175ca0eb2b628df1802137ebf66e8d79f6120c1cf0e6b2207966a84042433ca2a9f42cf219f1571e34cc
SSDEEP

49152:yR+/PHtBBgS4MEF6kyZRhjNCFzlD9j7VgKFurJ2QDV/emNi9frb1lg9cBe3N/b0u:yR+H1/nDjwzF5lFi2QNeo4Yhd01nY

Score

3^/10

discovery

Malware Config

Targets

- Target
  
  baram-main/PyFoam/Applications/APoMaFoXiiQt.py
- Size
  
  10KB
- MD5
  
  6446db392e1672ac908bb660d386e953
- SHA1
  
  11bce914f3bbb012ad42bc6a2947344018e7abf9
- SHA256
  
  e9466d17d06a11456c94c9b8ea7e1176a5a9a2b0b2d0f7b1b47f0e4e34cd356d
- SHA512
  
  69c959f02b6f2ebf699a94a156620dadd9639803fd737e0554de2738ddfa5fe0f1167d037f9a2b603e8af4847ce13590e1cb7487baa1235389d617246367705c
- SSDEEP
  
  96:3THp46KJP+j+GjQp7vGmQvTamG567yP+ej5dBTebM32OPJZkuFWOCDtokL2jqjUa:3THrKf1QTgBp2uEDEOJBW+JjP
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  baram-main/PyFoam/Applications/AddCaseDataToDatabase.py
- Size
  
  3KB
- MD5
  
  5e8fc9ff0ded71a6a443ef4ca1caa457
- SHA1
  
  0d88acc561ab52cd634c6a302986f11e4df634b3
- SHA256
  
  6dcf591c36a202c36f266247dfc0413ecfd40ee8ba6f3a7c9c4b19f66ac4f5a6
- SHA512
  
  04e79e7673d6b21dc2ce471737d4690bb04f115367cb07baa3fc6f10c4870f4b4261e73d47f3d17a37571952712bd7448dc3abb2e83efbe7041efdbc18e704f3
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  baram-main/PyFoam/Applications/Benchmark.py
- Size
  
  14KB
- MD5
  
  22b60274204796bec44d3aa3936f02a8
- SHA1
  
  5f88e8b727b41261b4c2a0eaa5aff508ca6b6bf5
- SHA256
  
  eb58ae215bed0be83d7d353b23dcf876d15125db7945620100675b8b5c822ff0
- SHA512
  
  0e6a1facb21cf9e4ec377002d38055e81cb42efa3ebe7679139a84110405449218b40f4db7b96872802128cdca8acbebe89c8217c7fa510253751f7ed2ed400d
- SSDEEP
  
  192:cxFQNn/ohdOii2gtZCeP6bB1gZzbHEs07VftIr2A6:cY/oqii2g/TgBWzK7Ur2A6
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  baram-main/PyFoam/Applications/BinarySize.py
- Size
  
  8KB
- MD5
  
  c97def296ac0207a09c1e64c67e07f6e
- SHA1
  
  057b8c0b55f81f3a1fba848f022a55eb57dcca81
- SHA256
  
  4605b9753320f31256376f0ab84eb42db7c8302b10a88812ab5e22ff100de2e6
- SHA512
  
  cbc053d383b3043de8d09f089c4b9af0f7985c662e3dca958fd1939fdfd9e1f6b2f9139cca3a37e6dc6a24e5e19c8c39b6181341adf3ae59dc272853fef43abc
- SSDEEP
  
  96:36+blxKlg55jM3UH5PQ366Nc3oPpXb2O3QQv0yyYQwwVDO3WyfRJbcqtekJx:36s4li5jM3UH5PQ39Nc3oPpYS08pJ9e0
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  baram-main/PyFoam/Applications/BlockMeshConverter.py
- Size
  
  6KB
- MD5
  
  e40dbd968e3936d6682c4bbe30fe83ec
- SHA1
  
  aa9edcff98a113bec99225b47e6259dd2484524d
- SHA256
  
  85298c1b9f3920d01097b33e0b22f580b1b1423f78df8ae3fb0f5105337104f7
- SHA512
  
  654447b11ef2259f5ddc1cb1de9c05bcbaf1bb1a09b4f47308046a8eb04c6024bf420e30750f586923fc075f8253f3730977092353705f85495bfcb6fd9ab4c6
- SSDEEP
  
  96:kUHii1r1lx1cwpPt5tpnuPnf8WhixKr1o6j0Ko60:kUHn1r1fKkt5tpu38xIS6s60
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  baram-main/PyFoam/Applications/BlockMeshRewrite.py
- Size
  
  9KB
- MD5
  
  601f61cabeabe66f835da11febb9bee9
- SHA1
  
  503464b8c64ca798671235c6f3f4f6e0a0f70592
- SHA256
  
  ead5d189f4383ea3a6fe747a9ba4724fa17402bc9bf1374f948b4f5a1f0d8782
- SHA512
  
  bd7ab67a1c2c137830a45bd1e4bd94483f5469fbfa9c43d6a4dc82d8fe69933d29653e810859f559ead81bbf5b600336eb10eded107066b765a770134dc9aa85
- SSDEEP
  
  96:3CmHuLcQ988nxM/lTfSnfk14nY3b+7r4XVelf9GVE9ui5q:3nHC6dTff1mY3C7r4Velf9qL
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  baram-main/PyFoam/Applications/BuildHelper.py
- Size
  
  9KB
- MD5
  
  e1640e13e8e0965a0b66e997646e3022
- SHA1
  
  6632a2ced94cb6252abed92c9b94038ddea4c53b
- SHA256
  
  40a035d12a0b86940e7cf1a7b2fca2fbf94b4722cc41143500e9c6418a020839
- SHA512
  
  d1671cf49781fffff30c49b2f70b92bf10e95403982776e1d307b48019ffc64b667e5be02b4da528683fae262493a0ee25ce08f87ce5e48cbbdb0c8bd466229a
- SSDEEP
  
  192:Ch7aAeP6DeOmKhPOGDd9XIfp2F4Dd95kEkLqQ6GM:Ch7ZePmeO79DnIfW4DzsqQi
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  baram-main/PyFoam/Applications/CaseBuilder.py
- Size
  
  5KB
- MD5
  
  864fae604d0a40a2748f25465161470e
- SHA1
  
  cc74d4fdf51d249cf3e01d5c85c261cf4b0f501f
- SHA256
  
  d5686d83b8b8710457c7d382fa191a37e7d6abee04fa6b735df5391eac7ea1b9
- SHA512
  
  94fd2793f55efc33f5468454f58f4d9c8cd07259bed9b16f9a9f6d3d0bf544c0f99d515652c6ca1ee6f60ff043fff246e96ac2596b0795dd4a4c47b683664ef8
- SSDEEP
  
  96:3vZKBeb707t57QnEEcQyLhqN6/SniA81B42KJiNpMq:3vJb7ty0N61A8vSgf
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  baram-main/PyFoam/Applications/CaseBuilderBackend.py
- Size
  
  14KB
- MD5
  
  20216588f86531ad86dfe9813891e955
- SHA1
  
  a451e13665b269ea3a0ec2355d8a0d974805910c
- SHA256
  
  43bb3629bfb3a1c59663ba5e4d6f066d77e236850a826801f893c9fd8da3e2c0
- SHA512
  
  87fb7955397c491e25fd7f93494cc0b15e5154957cba422a0497b3ce9d3fc4a866cf51dd3733677db9fc2afed09f10f9e44ec1c7fa4ee52d017c458e6539ae3f
- SSDEEP
  
  384:Cg9kmFm8GICD8ddKJT64FWV8jwwbvgCgYTStPr/hPLJ:0mFm8BCD8ddKJT644V8jw0vXgYTStPr7
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  baram-main/PyFoam/Applications/CaseReport.py
- Size
  
  26KB
- MD5
  
  a05070f432dc72b4283c86e533d594cf
- SHA1
  
  33c9323e35f55b6943aa8ca25cdbc962a25c8921
- SHA256
  
  468e78155055e2d0afb5f5fcb1929c8cfe987abea8f601c87a3a1f9b0884fb63
- SHA512
  
  3b2cfaaa3f065c698a540ce7cea1df30e5936d397680aac7b43a6e9b44325cee2f8fc249d6ce2aa990ef577dd87abcf4a07d6ac0a7f4ef62bc3945020c9c0939
- SSDEEP
  
  192:Ch76BSdRQbaLGEgzQ7/0UEIj2RPr0Fyz+pzBvy0y8Kc1uSGtXpHQSQEMY:Ch7xdqVEWc/0dIj2VQ1z+quwrq
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  baram-main/PyFoam/Applications/ChangeBoundaryName.py
- Size
  
  2KB
- MD5
  
  74a0a546ab0cf34e6f68e56c6dbbfd06
- SHA1
  
  75015f1735a2de6a4c017cc9d93d489e250aff06
- SHA256
  
  58a715fde5abcba03738910fa62106b35f02edffc49936bc924abd593ab7ff4d
- SHA512
  
  704472ff2331889e758a3743779d437e5c05af41bfbbfaada9f05b4a10f247c1a9850ec961d959f096e0883f6816edcb7a7eea209503b8e753d2f669063fb354
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  baram-main/PyFoam/Applications/ChangeBoundaryType.py
- Size
  
  2KB
- MD5
  
  fbbcee2f77635d2f88e38416da3a00dc
- SHA1
  
  177ba91c298c84dcb74dacc33cddd42dc55609cc
- SHA256
  
  5dec55237f3c2d81560907a2d5896ccc3a64c2c19472ef4ef4d21ab368c1d490
- SHA512
  
  5709ee3a6bef11244a6aa8d255c5f0e1c49cf4570911588d3827442bffff6c2dee09c1f6c8189950ebd90b760132c8c8114f6c7fb6b6a8870861e06ce3fa7bc7
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  baram-main/PyFoam/Applications/ChangePython.py
- Size
  
  2KB
- MD5
  
  80c727482d8a0481bf33326d7460f051
- SHA1
  
  c1c35e5595627a92ef62d88e9ab3a0ccaf2d6782
- SHA256
  
  5739d5d0a06f135a3d10f457934db27bedb5f36b17e6852ac6703e9c3cf58e96
- SHA512
  
  3b77731fd1c1222b8a4b09f121ab0eb147ed0b36ba123fa261dc3cb9e7f1300ade4b51a7e142949f65d8becde038340279283e29484f5ae644f1f180473a7341
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  baram-main/PyFoam/Applications/ClearBoundaryValue.py
- Size
  
  3KB
- MD5
  
  22a1adb5aa1a6a3b71081a83a74fd3ef
- SHA1
  
  29d3e5a1163d00338207d1fe0754ff9cc30f2016
- SHA256
  
  aeab9f2446a19bc4cd307a7ba0ba3035db8c22a731c9bb910c628b34ca005ddd
- SHA512
  
  a106f35a2455c637f3b660fafb0df6752d9530a8c723237f88eda25fbd1987305bce5870131334bed853cdbe26baedef85e5d1185551547551bdf8e39cab3664
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  baram-main/PyFoam/Applications/ClearCase.py
- Size
  
  9KB
- MD5
  
  6e757326424e8dc5c2f654c7a728bf19
- SHA1
  
  95184ef8470af22c91977ee5ebb7dd291c70807e
- SHA256
  
  a4b32e386850f197e30b50db2efd40a02913ddd850b62b168afbf4d12a0a74e0
- SHA512
  
  6b1b570c8c8e371a845adf1246fefe7f465d5dc58dbc152c0e40261891a15a148cc43d5823c9beb0d97dc899088054ebc4166af642e7a7ce48bb077fa44c714e
- SSDEEP
  
  48:oeymSDJ4xRtxx1P5C5kQ5k5KD5md5rfTB5Yn56m25yf5X6Z5O0Gm5dsGH57A58de:3yf0wOMquVCxDTtqDP50MU9CRwlLHO3L
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  
  baram-main/PyFoam/Applications/ClearInternalField.py
- Size
  
  3KB
- MD5
  
  7d651a374af56c25ed3c034acb54b924
- SHA1
  
  97b8cd613829166fa5e55807195519735de69e3e
- SHA256
  
  339576080d3f7cdd344520ae3a642c8e1bea6f6e49b03b3be8d5eefdea89a988
- SHA512
  
  7700263538c891161935067502d318d6bab89dbfb97f63a63e079bc29de6b509961158318fe7d4e5d0397087bb5aea99ba16f59f3a471f4f4c2942b43dcd9d9b
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32