1ca3a9e093819b41d581f064b35195ed7366ebb4fda07c9bbe857570e75f302a

Resubmissions

06/08/2024, 13:16

240806-qh6lfszfkl 3

06/08/2024, 13:13

240806-qf647szeqm 3

06/08/2024, 13:09

240806-qd156stfnh 3

Sharing

Copy URL

Twitter E-mail

General

Target

latest (2).zip
Size

204KB
Sample

240806-qd156stfnh
MD5

88beee4f86302e0e569dfc291b97d971
SHA1

914a6772daed93243656b0d34859b52d7564f51d
SHA256

1ca3a9e093819b41d581f064b35195ed7366ebb4fda07c9bbe857570e75f302a
SHA512

d014a9bb8e512974e2bcdd348cc8f51b292ace81167de15239d5b6f80409f785937dba97bce0dbba0a49114c8b081691d491e512136be600b35701d93675b94b
SSDEEP

6144:Mx9g8IwcOzlH/+H3d4OnyrdulLXzHlmO8ftu2:c9GgfEdvnyJupblu

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  
  latest (2).zip
- Size
  
  204KB
- MD5
  
  88beee4f86302e0e569dfc291b97d971
- SHA1
  
  914a6772daed93243656b0d34859b52d7564f51d
- SHA256
  
  1ca3a9e093819b41d581f064b35195ed7366ebb4fda07c9bbe857570e75f302a
- SHA512
  
  d014a9bb8e512974e2bcdd348cc8f51b292ace81167de15239d5b6f80409f785937dba97bce0dbba0a49114c8b081691d491e512136be600b35701d93675b94b
- SSDEEP
  
  6144:Mx9g8IwcOzlH/+H3d4OnyrdulLXzHlmO8ftu2:c9GgfEdvnyJupblu
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  latest/CeleryScript.bin
- Size
  
  218KB
- MD5
  
  ec0c743eeba2d92454ad10329733310c
- SHA1
  
  910fba6b4d291f55ee3ee7c58fd77f5707e26956
- SHA256
  
  77aff735ccce303e0f5f1a38d8336785b67e330ace99e582d0dbdbe96ccd3e18
- SHA512
  
  34c630c03a09212b83ce39a2530402213e0cf7b6aa4e396dfe698055ce5a4b5379ba6fc399abf0f2972ae6cac7ef0402eeeaffcd4529989e2c535dece7d1839a
- SSDEEP
  
  1536:LIwV7Al+RN0OzMa7Ja015BDEDD/p3sPH/tUZN7RFw7SQi6DU8S+RpS/P1a+pBg6s:0wODDR3sP1GN7RFw73Scwda+pB1dK
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  latest/FastColoredTextBox.dll
- Size
  
  325KB
- MD5
  
  adac0cee5cc4de7d4046ae1243e41bf0
- SHA1
  
  c8d6d92f0dbee64d0f4c0930f0d2699a8253e891
- SHA256
  
  68d0e444c0b27552d2cb86501dcb7db3fd64b82d966e9708db0408ec1ba38c79
- SHA512
  
  1d7af604540532a4121850760b1e401bb6356e59503c26f3d1fa358a105b7d88362c92f78aa4394095b165f06c484b8c2d2ed640380e85ef9b3eb087d3e7c869
- SSDEEP
  
  6144:CbgkJe4jG4m3oCCClXA34Wm5pVg/IWTKZCQOsqJLDd5eNqwDl1HD5:CbgEGv3oCCQAohVgSLmeNfD
Score

1^/10
behavioral5 behavioral6
- Target
  
  latest/Scripts/UNCCheckEnv.lua
- Size
  
  28KB
- MD5
  
  b2ceace019d75716fd2f61641f26b77c
- SHA1
  
  bb97eb3991943dbc1c0e091684525b63084e3224
- SHA256
  
  068447242986b338036a4a80288762ea20be51e6b2d6e4c14530a83e33cbb1a9
- SHA512
  
  3a1c45ff5c411cfc3eac7fed60927ec0570b5611b5b70b4cc4ad5a62a1dfb5beba9ca882d1a753e06da61b6341be1de80e0c5b5b457b8ee792b52c41c205997d
- SSDEEP
  
  768:JopEYRzOKMrGrE7BWf9r+T+f9TkIuP4hUUsbU8FqQFBF5UXzRFEe3cSG5Sg/i5rg:JEKcZuy94
Score

3^/10

execution
behavioral7 behavioral8
- Target
  
  latest/Scripts/fates admin.txt
- Size
  
  97B
- MD5
  
  510ab25dcafb9cd10edece071dd070b2
- SHA1
  
  b3b94bf12f595d07b06e79e866042d33971bd6d2
- SHA256
  
  c54660298bad50d182f2604108dc1717ca440557d1a1ebeef747f5bc363f38e2
- SHA512
  
  4a8a7edf925b47b5013fef38cb2c432249db82c7d4291f29f5b0614a4852e46e4fd9ffcb447f079714fe11b5fff9425c0d9265c1d4c7c7150d82d5db7ae0ee12
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  latest/Scripts/script.lua
- Size
  
  95B
- MD5
  
  afd05cb287727a04cbba9b9ca5384f14
- SHA1
  
  49090a38812923de9e2add923ee7f0ae4782f8b2
- SHA256
  
  26e1e9f5c24b790351baef484ac9cccf15d8b4623958bc03d445938330c71fe6
- SHA512
  
  1c86ea8e2d497242442cec2cddd41c67d761638a4f1054fcdf40f43ceb1f7f61dbdb69292857ccd4664921dfd631412fbb735ec2e31ef2d90d93baeb1813350f
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  latest/VisualStudioTabControl.dll
- Size
  
  12KB
- MD5
  
  365be8c17e1cce92c530abaf16d4c709
- SHA1
  
  a4c1f9cf40408c42a0865806b28c7552b0ba91f0
- SHA256
  
  af6815d815f4dfa21bd7ea9c0386b18359363478adc277870cf99577d9f5bba0
- SHA512
  
  532f246fc72d9f65936eaf8dc0e77d91b3d0f5070de1f5971d889232b1905a56f1dbccf896a9ebdafe268b9b9d34a91ea78904c92fdcca440e19d77134327c5c
- SSDEEP
  
  192:ap9gZJpVFf27JZE/3FaXIDbZHs3eJ/PCYOaPlgORNQEFKfyfPatuBsboFSOIP:S9gD8IDbptJ/7Oa7RNQTfCatumboIFP
Score

1^/10
behavioral13 behavioral14
- Target
  
  latest/WindowsFormsApp1.exe
- Size
  
  19KB
- MD5
  
  a298aea4958e9f105469858228b3034c
- SHA1
  
  dccc2c8dd6027b34b074d08dc3202334aec7eb62
- SHA256
  
  b4495e0916b906b00df2b0557c033c7e914d0165c865383fc9ea58a0d4da32dd
- SHA512
  
  b2a7a984ab0ed6a7595bfdbb40732f790f16b038459b8af09753c9693db93799277ee562a62811ff354c413bdc59866a4f4540b2d8b24fc348e578c9b75919ee
- SSDEEP
  
  384:sJZ/pe2dmHWWP9F2BuvajKm8+flWDHL3uFVLGrcRmnAL3LqLiK0dHV85wgCCCCCk:s3/sfrCGmXsrmGEb230dHEr9L
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  latest/autoexec/autoexec.lua
- Size
  
  1KB
- MD5
  
  85f8b08051a78645eed31da7f16c787c
- SHA1
  
  48a45c025b41cc50f5122e2c457942eb4d371d2e
- SHA256
  
  58c7477e23d00b10a0ba5e03abf66dd4bd222b66ac4e5998340f0482f0571a33
- SHA512
  
  386ee8c63fa2857a38bae997aee6a52e0a6333647e2b051e4e89a118487e7b1952fd0ed8322233ae3427531d23ffcf45283815cd84801d1445a5ffa1f5f9d4b7
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  latest/bin/api/CeleryIn.bin
- Size
  
  44KB
- MD5
  
  2682352886b9de7763dd637ff940ef97
- SHA1
  
  6df1516ed9f1084bd0e7b217996353afa3babb98
- SHA256
  
  eab4356a735f604b31f493f2c9f0f98448ebc2671825e348145609fed6e927e4
- SHA512
  
  0799a9d1126b444992638bb16e62726d7d49753d74845114f0076fb5d1e7159c83d0f7e62a1a80a9b034a59529ef73b0fd7acfdccc754cc9c3cfd1984ae4ec3c
- SSDEEP
  
  384:rVdzew6q0MEe7Tc8cZO1D9WDPAULcRUSoTYVJa51xoVMmA2QdwB5bh1r:5YiXFcZkRcZJTYVJanUNA2jj
Score

1^/10
behavioral19 behavioral20

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20