46a8ce6edaccc04c1c1123ad08eb7168a931b8b161dacdd8e7a7faa3c0ad6c24 | Triage

Sharing

General

Target

FeatherRelease.rar
Size

31.6MB
Sample

240806-rrzpya1fnl
MD5

e6cde71e013fbcd24098be47ce1b02ef
SHA1

04fc1aedbfa583a3d7796c0b20b13a1a432eba36
SHA256

46a8ce6edaccc04c1c1123ad08eb7168a931b8b161dacdd8e7a7faa3c0ad6c24
SHA512

2ffdc74ed77932ffc7feccc9018f55442beb9b6b45b6be300f0dd445aecc9dfd6c0fb9b1208efeb913e465e5eac3243cdc1f008f256c40e26c338362a783f140
SSDEEP

786432:rEkHm/NnO7fSi9DvKniX2N4BuJevEjnfF6pqXJsBTIqSjKs9sCTRO/:pm1O76i9DvKiXXuJuEjdoqmTI7jK2sC+

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  
  FeatherRelease.rar
- Size
  
  31.6MB
- MD5
  
  e6cde71e013fbcd24098be47ce1b02ef
- SHA1
  
  04fc1aedbfa583a3d7796c0b20b13a1a432eba36
- SHA256
  
  46a8ce6edaccc04c1c1123ad08eb7168a931b8b161dacdd8e7a7faa3c0ad6c24
- SHA512
  
  2ffdc74ed77932ffc7feccc9018f55442beb9b6b45b6be300f0dd445aecc9dfd6c0fb9b1208efeb913e465e5eac3243cdc1f008f256c40e26c338362a783f140
- SSDEEP
  
  786432:rEkHm/NnO7fSi9DvKniX2N4BuJevEjnfF6pqXJsBTIqSjKs9sCTRO/:pm1O76i9DvKiXXuJuEjdoqmTI7jK2sC+
Score

3^/10
behavioral1 behavioral2
- Target
  
  Microsoft.Web.WebView2.Core.dll
- Size
  
  557KB
- MD5
  
  b037ca44fd19b8eedb6d5b9de3e48469
- SHA1
  
  1f328389c62cf673b3de97e1869c139d2543494e
- SHA256
  
  11e88b2ca921e5c88f64567f11bd83cbc396c10365d40972f3359fcc7965d197
- SHA512
  
  fa89ab3347fd57486cf3064ad164574f70e2c2b77c382785479bfd5ab50caa0881de3c2763a0932feac2faaf09479ef699a04ba202866dc7e92640246ba9598b
- SSDEEP
  
  12288:6CxswUBor35JrpQ322zy+uFKcDoRFNCMmeA+imQ269pRFZNIEJdIEY0lxEIPrEIE:6Cbmv
Score

1^/10
behavioral3 behavioral4
- Target
  
  Microsoft.Web.WebView2.WinForms.dll
- Size
  
  37KB
- MD5
  
  c7000faa6c6040188c8cd8ef28b6deda
- SHA1
  
  07a23c50092e5c1fd9c9df87e26b65df25d37b24
- SHA256
  
  e4f695b72f99024e3ee5d5f26a367e664f4e120bd5d90aa87a8bc0509c365ec8
- SHA512
  
  eaee01031477454823974546055965df8d75c5115b25ab07b15ca608a20e8c21154ebb8c707a74213ebad04c2bf34a5f5563306e6da502235372c60672144022
- SSDEEP
  
  768:sijOv/1uokD/iyUdcIJtYZDgcEST3p4Jjrjh2jJFSUyauTv1JKia5/Zi/WGQK4uC:jOvZyUjJtYZDgcEST3p4JjrjaJFSUyaf
Score

1^/10
behavioral5 behavioral6
- Target
  
  Microsoft.Web.WebView2.Wpf.dll
- Size
  
  50KB
- MD5
  
  e107c88a6fc54cc3ceb4d85768374074
- SHA1
  
  a8d89ae75880f4fca7d7167fae23ac0d95e3d5f6
- SHA256
  
  8f821f0c818f8d817b82f76c25f90fde9fb73ff1ae99c3df3eaf2b955653c9c8
- SHA512
  
  b39e07b0c614a0fa88afb1f3b0d9bb9ba9c932e2b30899002008220ccf1acb0f018d5414aee64d92222c2c39f3ffe2c0ad2d9962d23aaa4bf5750c12c7f3e6fe
- SSDEEP
  
  1536:fpGqPvHCwKi8GDP/ryEH0GBy4JjrD1alhWU6Ozk1FKKa5/Bi/xGCv0Z0D6TgfPSF:ai8GDP/b0GBy4JjrD1alhWU6Ozk1FKKc
Score

1^/10
behavioral7 behavioral8
- Target
  
  bin/API.dll
- Size
  
  1.3MB
- MD5
  
  157fd035b2a344a94166d7db3756df0e
- SHA1
  
  f221d28c1deb80b4e8d9201226435aefce6b0f75
- SHA256
  
  8716c75aff75941711aff8770836f47eb9a254416089ef3571c6fc9a338b3009
- SHA512
  
  fad0174fbd22f58dd4fcdaad8378c214270b4faeaca64d9cb306f50e9316072a4c417c5723c4123b8bf94a3dba6ef4e3303ec60f4a2cf0c3a54d8ab375ea717d
- SSDEEP
  
  24576:ZqBSLRktEBl6blwTUMD4zB1VU2bFjYWR0pMQUAqLRAovh4bSAXVVRNRfMXZO:ZqBSLRkt8l6blSU//+2bFfvA1SQVVRNk
Score

1^/10
behavioral10 behavioral9
- Target
  
  bin/Ace/ace.html
- Size
  
  2KB
- MD5
  
  9ea3feaaed24c94916fc81753150e654
- SHA1
  
  40c05dc617784b9e05a51fc63febc9bf684b650f
- SHA256
  
  d9fa6f0596b11057cff5d08d0df2e83ba6e3b0a4d83ba1bc73235f6b4b9d8b86
- SHA512
  
  3424a19da7f40874f80ea357dcb553189568409b587ae2b60c4a2cabed2feded92b9dfaef751e0b4705bb15593522fd6c60e97b6438a0f75e33ee91d0849a3df
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  bin/Ace/ace/ace.js
- Size
  
  701KB
- MD5
  
  a6686a7c46bbfc45d4f3cc5a9bafebc5
- SHA1
  
  4e8fa74de2025edd550fcc4b4d869f385d1b73c7
- SHA256
  
  208c0601362fcccf0df59329fca92eb03d914d11978f115005e280cb22f569e2
- SHA512
  
  13c807ce60c33a6ffe7531b8984d7a3e2e0144a9dec2d3620136da799d45e80f65eb22b58103aff071cc0c64716c667c624af9446662253914cd418f0c7e02a6
- SSDEEP
  
  6144:oq4Z4StNfGDghjQYOIsb9U9lJiujPxBrLeq/SqJbXbZV8dxcQgnmpqptB9z/n68H:ojBtNfGkf/jxBv7oeR9zWk1nyP0XRx
Score

3^/10

execution
behavioral13 behavioral14
- Target
  
  bin/Ace/ace/ext-beautify.js
- Size
  
  11KB
- MD5
  
  e25a9f1eefb91ff068f8f2a3d021098e
- SHA1
  
  72ab67d8e39cb4f61d384cf5666085d7e627d3f4
- SHA256
  
  c8c01930591173ebe64a1d6b9280f36398c83c5ffc148b04f73fa94b4ef36191
- SHA512
  
  fd8412a50b74c72fbd6180bb8031a8ff81b7ccb691ae07ce251587fa65e230810d18a0d9c0387cb7bc6921a062766c7ca0e7b2e90a4cd19af2db1462359eb675
- SSDEEP
  
  192:925ATmDTIxw+gO1WSS7PXOig6iGKiPiZ74NmZbhBoiMS+k28iSqQqHAFvSYJppWT:UATmDogOcKZbKL0y7
Score

3^/10

execution
behavioral15 behavioral16
- Target
  
  bin/Ace/ace/ext-code_lens.js
- Size
  
  7KB
- MD5
  
  12022137d3802cf3a9269e2e52289425
- SHA1
  
  bd8dbf3bb4a3d5eec3a63564a30b4c8cf09472db
- SHA256
  
  2a6770ea9f8f0179f71d66d47f65bcfa28f918fede686422e54e0edcb9f19fcf
- SHA512
  
  0f0095034720f8e6b07d9189d3a9b39da71889d5808f0fdb7f8cda99463fd693467c94032a6dec32951535f5f6c1bf25e51e25cf6c39d160c10b03e1f15d1550
- SSDEEP
  
  192:zACH9KCH9TAH2K/CKCHKH4H5iwt0741tHJHyR8Hdj6oXeWgcV1dyKHPur9yxCCH1:cCH9lHBAH2GClHKH4Hg743HJHbj6yeWL
Score

3^/10

execution
behavioral17 behavioral18
- Target
  
  bin/Ace/ace/ext-elastic_tabstops_lite.js
- Size
  
  8KB
- MD5
  
  4a5c939da4f22719815b2a85b11d29b6
- SHA1
  
  493a37c00678d36d34f860056c936d3c6083c79b
- SHA256
  
  03ee8372a6429a8c56e8af02696e66bf42459db32a196f17f8d2c672caa2ed04
- SHA512
  
  a51aa6d3e50fab0a82333b3f09030006676d1aa3334b88b6155dbeab67dc0241b8d3f1f91a626cf7f75c659f77c1d8937532b320fb87690ceca24b9b973bd5ec
- SSDEEP
  
  192:glgCuuLpykQ8yuhtLMa07bsSslMosy9gyQoFx/UUhpUSbax3r+/Sy1TCa:agC/rQuMLsnlMojx/UUhpUSbax3r+/p7
Score

3^/10

execution
behavioral19 behavioral20
- Target
  
  bin/Ace/ace/ext-emmet.js
- Size
  
  47KB
- MD5
  
  3c3303c8a63e5ae66f982350ec857e87
- SHA1
  
  f74e7a21ed7ad26662e02f94abe34aacf6882785
- SHA256
  
  23331809f93f30031c0df2673450c6d67fa13bf3211dd7094d1d6fa9b99e9c18
- SHA512
  
  a8cff4d37337535a9886e5d24143de9d507f61a0306dabb7ff3d4b9186f51d52c205153c3dc6b0d587089f724ba3e2a83e7f9af2c7b26f15fa820898f48321a4
- SSDEEP
  
  768:7z5x5p5gfW3oq1D183CPjvHUCJyYZBkn7yOTbGK1JLP3KWa7kg/IqzCDrpNyBhB+:7z5x5p5gfW3oq1D183CPjvpJyYKpZ7Ck
Score

3^/10

execution
behavioral21 behavioral22
- Target
  
  bin/Ace/ace/ext-error_marker.js
- Size
  
  336B
- MD5
  
  b40f7996c4bf9099abb5f8b3b0f0be7e
- SHA1
  
  f408918b226931d0090064f6b2ad3922890152d9
- SHA256
  
  d549c299502c356538f2444d4ebba5f251d9cfd7fe137c35a9dd64aa0d5650a6
- SHA512
  
  779e2946d01663fc4b5b7e4f6f35621964238f6b4c9eaeafaab85622ca7b62c338afe11476648b0d642b27d35197501f928eaf8229f9001c0ae5652f04197a65
Score

3^/10

execution
behavioral23 behavioral24
- Target
  
  bin/Ace/ace/ext-keybinding_menu.js
- Size
  
  6KB
- MD5
  
  e9e7aa9d8b73e9420058416a2e425749
- SHA1
  
  72779ad95194a6b7be98f0ac45b7057e5c1088af
- SHA256
  
  d58055479c707296cb0b129eddf5d3684d1b37caa48bda3ccecb37f1ec3612f8
- SHA512
  
  7a72a8ab9a893dc335281376b9f7b9a58283f4930676e0f5b8c6bbb62c6d50e94e3a12c7965d93018e61d7dd5f755397851c6f2a51af50ee58732f9723c4843a
- SSDEEP
  
  192:2zQgi+w/VwzeFZmZucbzcBUeQ9PI08ob5JIJzp/xtSgX2s2h23mjiDya+mTCa:qzeKcUnx8aIJft8AyaD7
Score

3^/10

execution
behavioral25 behavioral26
- Target
  
  bin/Ace/ace/ext-language_tools.js
- Size
  
  75KB
- MD5
  
  56e84b42d4d10cf8b86d9462c517ac78
- SHA1
  
  32ea9cb3663bb281beb3d00a66520460e6b4698c
- SHA256
  
  20042860c5d8776ab14925360d1b14a378dedb1cdb62f1bd2689aa4f5e1cc750
- SHA512
  
  a02f1836ae46a66ebc7553be11cf9b357013f7a90bf8dc20d999f97ec44ba03dc1f2136799131c9b7c41d9454c73362d314195a5c42dd88014cf68fe3a02bb38
- SSDEEP
  
  1536:7z5x5p5gfW3oq1D183CPjvpJyYKpZ7CWa7kg/ImCDrpN8msdFKVYYf8cLNt5AqeZ:7z5x5p5gfW3oq1D183CPjvpsYKpZ7CWC
Score

3^/10

execution
behavioral27 behavioral28
- Target
  
  bin/Ace/ace/ext-linking.js
- Size
  
  1KB
- MD5
  
  932265422f7925d95cbe5aebe3a12f2d
- SHA1
  
  a841875e361e6d6406d8c359568e69785d8b76a9
- SHA256
  
  06f733685f2bfae0453f2429772718ca49bd82d8fa748360f8b5f69e0b9ea612
- SHA512
  
  730bbfb647b18b4339eb14d200a46617cef4e68354f24092bbf82a33edf2a8fe1f4dd988a9ae691ded3f34e79c626f8068b4357b7dd39d7f9bcca448c1ba5a7e
Score

3^/10

execution
behavioral29 behavioral30
- Target
  
  bin/Ace/ace/ext-modelist.js
- Size
  
  7KB
- MD5
  
  6bae0154b4d0810eb877c9be3ce75e60
- SHA1
  
  6385ca597d6c7b1f96ffcc58ce1ca805471817d9
- SHA256
  
  2320ea3d88be7be9ab5c6fbe6ed170dd93e160547574ce6df0d137aa27d2f9f5
- SHA512
  
  bf15b43032ce2f39b28db369e3dcadabebf523caf89aaaed9a528f0564528ea660f70cffeb6927cfdfe0710341214c3224b6df7b43258bbf1df20920131f1179
- SSDEEP
  
  192:viIuiQvnTIoVcsruDi5z0O4D2OKkbeJO9kdfFUrsjs/VDfWQofXFe5LsTCa:mT9VcsrkiR0O42gk3UruOVD4FgLs7
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32