ff0593ebf0842e4e36449b50d3debfa321152ae3169eb24be52afb5772495577

Resubmissions

09/08/2024, 00:02

240809-abhm2swglc8

08/08/2024, 23:58

240808-31lp8asfqn4

Sharing

Copy URL Twitter E-mail

General

Target
Release.zip
Size 9.1MB
Sample240809-abhm2swglc
SHA256 ff0593ebf0842e4e36449b50d3debfa321152ae3169eb24be52afb5772495577
MD5 dc4065302945db51dece3631e8f1132c
SHA1 84cdaa6eb661eac4ae0782209ebb09c3ac938b5e
SHA512 e787e4e91ff7e7f56d29fd147d91457ac163cdb0651b37b7d870dbb4784fdd325b538fed448bbac049f76a06e54af53798cd00607c332cec2611df7270d2e3d9
SSDEEP 196608:Jy/QEcnNVmUhiF5sBio1UOQi9dq9ogl8fRRfV1WUpOjkDk:n1M5sb6ekSglMRRt1WUpOjCk
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  BetterFolderBrowser.dll
- Size 12KB
- SHA256 5334c9c4eb567a89e4644df868d7fb6e242a3ea422b2ce9283843970ec756372
- MD5 fff67e7d52b58a11d456a1d5cd2ba294
- SHA1 6dea84a0a060c39c93b1e3f404270c039d3dbfdd
- SHA512 fc8cc5fbc624559e03e70c48bd4e6e4595b1784fdf2c258b33ddb3410bdd93dcf26f3b5db4e4d0d8f133e8df93fe95ab93a703efa92a0a4133f57f48ebd6ea74
- SSDEEP 192:2ZPVABalnP/VYkWdcHIp3RgzK/RGLHdnKuWGIBC0p++kVX805N9:2ABk1W4Ip3ez4RoF2+bR805N9
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1
- Target
  CeleryApp.exe
- Size 8.8MB
- SHA256 6a25cc6c05e54ca56e8b51d2b2bd8b9a17a96ecb1d1f6d4442d36378dc809ed1
- MD5 74c366b46a85acac6c83e9671e64dda7
- SHA1 dc9a7b4cc7511b701401aa86e0106d3495e3a0fe
- SHA512 e0df64a74c3c9e1c36f5957d346d961cc92741b1803e05d41454dde4371a0e9420f9e79163bed9fe2d8b588b9da6f2faaa08003ca50be37a6425a8320acd15cb
- SSDEEP 98304:wEgLIRfyC7egWJ3iJzdjf4fwraOWcD9XdMPABIw/t6KHDicVwzUs7:wEguhegD4fJOWs9XNBZ16M2cuU
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2
- Target
  CeleryIn.bin
- Size 44KB
- SHA256 eab4356a735f604b31f493f2c9f0f98448ebc2671825e348145609fed6e927e4
- MD5 2682352886b9de7763dd637ff940ef97
- SHA1 6df1516ed9f1084bd0e7b217996353afa3babb98
- SHA512 0799a9d1126b444992638bb16e62726d7d49753d74845114f0076fb5d1e7159c83d0f7e62a1a80a9b034a59529ef73b0fd7acfdccc754cc9c3cfd1984ae4ec3c
- SSDEEP 384:rVdzew6q0MEe7Tc8cZO1D9WDPAULcRUSoTYVJa51xoVMmA2QdwB5bh1r:5YiXFcZkRcZJTYVJanUNA2jj
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3
- Target
  CeleryInject.exe
- Size 5.0MB
- SHA256 c5448339124931a267dc09f9ccf41878ef64e0e9a2553a220b2cb950a7aa8f56
- MD5 6b11846ac7d1cdfc7bdfb9e27210ac7f
- SHA1 ec2056b1a47b60a30ffd16313c07bc7e8e28bf64
- SHA512 dbb516ed47772151d5c3b3147a419f9157a22f9f6853c9a77db4713f06f7d02eed2295a9c522721ca3d5b256972089dfb76d62d5b42bbc271fef9d22bae76264
- SSDEEP 49152:3esFEyhNi5PyeVuOvW/eDGjyYl2g53PaiTs9dnNdnndn+dnc81u:uzVP
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

discovery evasion persistence privilege_escalation trojan
- Downloads MZ/PE file
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
- Checks system information in the registry
  System information is often read in order to detect sandboxing environments.
behavioral4
- Target
  Costura.dll
- Size 4KB
- SHA256 41bb464ac7c0d192641077e44a59d7d89860c3c620a59961f2fc4a4be47deae3
- MD5 501981c7fc457d59238eb99780efb615
- SHA1 f1f25c01f6acf33bdd62c4f82d3ef078e76f0906
- SHA512 5921d0662add6c8aa075106878cc56335ccbf059d8bc7f359fe9e02a52ec657c3e5df1c718929564c09f205e4bd299b086f3e7424141f5e55ed0d756f65ee1e8
- SSDEEP 48:6F+lni2qJfjVRPGwzCo4MhTN0KDdilETrVsH4/QWk1qyFVT2IbG:7g7KedGEiYIWM2
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5
- Target
  Dragablz.dll
- Size 233KB
- SHA256 6c5724efe19f5945143626a8270c9c3a188d4886eeaca083c57c742a985c7338
- MD5 5a9583a7bed76b2e94091f9b74716f68
- SHA1 60552dc4ed629b32a7c0e7b31406a21829bdc38e
- SHA512 8ab70fd60a27a80e43a270a401e8772833ad0a11ade1ea13483b37b1a02dbb70679bbe200fceca632ee1ba8df66a95a51a2fe65671eb3ae596682d3e1ee1c0d5
- SSDEEP 6144:fTuK/5J3BPYcKHJv8ahfgfkMMafGfCfDf2fE:fKKhP+Dhfgf7fGfCfDf2f
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral6
- Target
  MaterialDesignColors.dll
- Size 295KB
- SHA256 1966082c8efa5ecddac7fd8b3e3b86a63599602d18bdff17e7c366d49603aaf0
- MD5 d2207fccbdd6caa91c43776559ce401f
- SHA1 4f78f282a238b21ad1f995f154d624865d08a38a
- SHA512 d4984e3a6d82e7ebe11c2f7ea07092e60ef1396849921c6c0a463dd9b38836c5f6799e79f932bddc62b89d7a9896b5e5ba931c3c8cbfedff51076a41796a8c0e
- SSDEEP 1536:1r1In+fq1fDfDemxD0EsXpGX0EOAyzU7fKoVxbzQXT:B1WB1PerAjOAL7fKoVxb2T
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7
- Target
  MaterialDesignExtensions.dll
- Size 349KB
- SHA256 c5b93560fa74b9a05959aae5116da59495d36782d2e17e45f0efcc06ad36ed6a
- MD5 6da7ae89f1eac96f143dc5200031d8b8
- SHA1 d9dc3936bc9a288a727cb2295c3d05899adcc9c8
- SHA512 3929f7092a5acb5ae3333e7e0a9ac2a403b78c8c8ad35a17ece25e6688a61a0f7e4b701691b02ad2941c6e15d2262c6f8ae76413af93dc92aa422e1738147e94
- SSDEEP 6144:OM2EyV6zxDNFOzaFkpXeRk7ecDfE0MHOZB0zSvo1UvEGK262:nGVcxHOzxpuRk7emfE0MHOZB0zSvo1UJ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral8
- Target
  Microsoft.Web.WebView2.Core.dll
- Size 445KB
- SHA256 c2441011ec290b3408391f32072379f677ab3fa4507c4304167cd82fad6593c1
- MD5 c4b4a5f4f28d47239eb4e37cb3cc8046
- SHA1 ed86941cf065f91758d536d8e13cc2542cc38922
- SHA512 440ee33d5a830d9c59d96367f2a43d4a4113f6fe0924a691e682a2e9251a8615e52177dcb9af225dba538a8a3893ac85be79e9c1aa687034e3da6c95191dc645
- SSDEEP 12288:EB7Md7DkbrB3kPo+iKvRFNLe1+imQ9pRFZNIEJdIElxPrEIvLcglxMwCepM1STUH:EeFP7
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral9
- Target
  Microsoft.Web.WebView2.WinForms.dll
- Size 37KB
- SHA256 c9eeff2dd13109f41447a92763d31aaa07369c58a570c18bbb851824a77da98a
- MD5 e6f424ee6036ee7d58283780b705be8c
- SHA1 c17fc397711fb2e0c400007620c76e70c956dd9c
- SHA512 1d255265115a4a2238a21e3ade35101babcbf9d5de58521365666b9564681119c4b7f20ed6a6c16fb6120ab19106fa40f25421da938b7fee7b8a5e7758f2c22f
- SSDEEP 768:ejIHFTA42CL9tcZDgcEST3p4Jjrjh2jJFSgyauYv1JKia5/Zi/WGQKVu6bL7RSOX:AIS3C5tcZDgcEST3p4JjrjaJFSgyau0H
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10
- Target
  Microsoft.Web.WebView2.Wpf.dll
- Size 43KB
- SHA256 15bcd610a80632ef59d911a8447b11127cdeafbf147c844f1b740735efdf338a
- MD5 0241e0a42b292e0c9b585470c613ec78
- SHA1 74e4ab7e37bff177a394617923baddfcf087c0e1
- SHA512 bd083301c6f93a1852c76686797919787f439c65ea11d430701257fa4d3791a4eff892b6ceea1c534d832bfbc0b0ecca3f671e3a9c50f34089f919e3756882f0
- SSDEEP 768:k2TI5VoCjJ4Jd7U2zkQ+Z8cDP/ryEH0yBy4JjrD1h2jVh3URGvkz7FKKa5/Bi/xm:VE5tjJ4Y2zf+Z8cDP/ryEH0yBy4JjrDC
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11
- Target
  Microsoft.Xaml.Behaviors.dll
- Size 141KB
- SHA256 b864da9d88414877cea9b1a016146265a5fb9d0e12f4dbb1dccc0cc998119a54
- MD5 ec5a1abee150abe698689211b07cd1ec
- SHA1 affc3cb47da8fe76986d271cdc3e7ea345cc04e5
- SHA512 a2b55b4ffc3f11546ed8d3457e98b986c089e25229bd687da35d45d63e4860722e8b13826d3a3daa1be843cf3a4ae3da4cf9b6fdcb5d1a4948648537e683789f
- SSDEEP 3072:UAyazS96IT0O6gAf+LwCMe1u051dXcr9/soMEs5r/j9:tyhYIT0O65cwCMyE
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral12
- Target
  System.Diagnostics.DiagnosticSource.dll
- Size 34KB
- SHA256 d22133818a30313e0becf010d78a556a56b34ea361dbd33588c9817631fed540
- MD5 8d9df432109f1cfdd86723b5f171e3d7
- SHA1 85dc92edd4b0049ed9049e075c4def8a3d64e43b
- SHA512 5c83303934eecfa61c43a071d29c98e5804d37a5dc7f7b035772d6a168b0c5e65dfabef20b46214e65493c4bda44831cafee83615498fbe9e718c884f4650edf
- SSDEEP 384:iQobG82oiaPaf/gn5LQ0+0zdQUv2CtyW8fiFISWbW9pWJbWivT1Nq0GftpBjAvnC:nA299fI5dxzL2CC11vimvnEBBNFT
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13
- Target
  bin/Monaco/index.html
- Size 13KB
- SHA256 3818906ed429acd27aabad7ec8771893d60658ea31b8d0c92418b96de8ee94e6
- MD5 8132342ce4b039603cbb3b1a32ab859b
- SHA1 66c46050a6e5b08758c00455ae26a6c66e94ce4c
- SHA512 44d93118187e703af1fc1627de7e97c39072e666c9086b1b4c00a7eadce1913c84dc97e8f80e2b514154ef66b23baddbfd71a2faa250735ddf4d2bc12709cef4
- SSDEEP 192:oL3bXRggAbYm/9mv2Oxr09VpDwFgBsK7u24FzTkcmc/VT+9taAc4dReigXN:2RggAbYmbD9V9wFgBs+SFN
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral14
- Target
  bin/Monaco/vs/base/worker/workerMain.js
- Size 174KB
- SHA256 19b566655d73370a820a7d6fffe7af03dba3af4997016c0983be5bd188603ec2
- MD5 9ce9e46b6d66d8b2dbcabba577cad2ed
- SHA1 397b0e9e7b2bee37a8444e84bb9788a0bdcb023e
- SHA512 f322ea669fa81397066edef062721ae3dd515b3d61c4ad7bef0db0eb3a53f056da298fd4f761bd3e5d613e6f5803a7c35ed056085ac3b97e06c7bfd47fffad49
- SSDEEP 1536:mi5eQeCEwCP1m9JXKmA1xKzyOQJf9X2K7eM9bWXsUK5QSkSoIMQwr+ZjtQYyeTMO:mHTdkKmA1yyOQJl2K7ns6dZ/RVaNzY
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral15
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes.js
- Size 2KB
- SHA256 1fbe4337327ef99c9caba74678cfff28652606fd667dbca34f12e809738010d9
- MD5 eb6fde8de905af68c855a2506c8a8204
- SHA1 32b172578f398151be79f78bdeb15eeff4a83020
- SHA512 6e95ecdfbabf20c2e717006ea00fa92d79e577cf262460cef7f3db7bb4fa87585bed99b6a1bd1d865c5e5184044b0244aa0823580c9444b1f2ff013057f54235
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral16
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes/base.js
- Size 521B
- SHA256 9a6c60193eb2dda7c2682bf9c7ff7e01b0f6000d70881583f0055782c8b2c619
- MD5 29e50887a6f1c445e0f63bed73eefb83
- SHA1 b8e006b9ad14bb6012497e164d9a4f926e2d568d
- SHA512 16cc7fd8b5641d347a6a9e8542a6ab29d71a432dfb2f72dae05b21b274d92208ec7c5a9ad1ba313658f3a68aebd9edc3d0bcbf07a03d0f16eae95568f175dbf4
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral17
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes/classes.js
- Size 33KB
- SHA256 75418233aff9a1401f6c467f8ca20999803436bc1ebb463123d1fb94dcff1f38
- MD5 fabe9b3ec7774eb374f18709ab41c8c0
- SHA1 de6c19413ef008000357bccea90faf0d23ccf605
- SHA512 d7b4a9dbfab0ec55e27b2ded86066b37ebea7d50b3b6b28f44c996f8280463176f1107c6bf15a52fb700f88ac3e0e7b87fb8a50664da9b31fc0e89a38d2055e9
- SSDEEP 768:EDVdzN+yYumzw/Wx5nYCH0e2zBsGMPv3lHhj4MyjKG9jn9/j7NFvHR0hT/YEkd3M:H6/W3YCUpqUDW
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral18
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes/classes/DataModel.js
- Size 11KB
- SHA256 ce2e06aaa97355c4f68a0793c41d4e068b3e1a225f5376d9dd3f4016e0441c7a
- MD5 287b74a1ea581434cca8f9009f1489f2
- SHA1 877544929146171e416cc8fb33b0e7e49845df3d
- SHA512 4cd7b324ccde3fbca94ab948c4d831655125d6d4e2b237291b8e68f172cb375002c7ccdc49c3cfcf4ab6b7d65850d1a40bcc3f9979498eec697bae43dec7b54f
- SSDEEP 192:AJCfeXBM5iG6zUMmY7QMlr4qLYFQjG6AcE103aNd9xZAqGQ2qFARewPxHFTX0:9feXB2iG6zUMmY7QM54qLYFQjG6AcE1X
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral19
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Enum.js
- Size 594B
- SHA256 9bd9c85c5d1f476e663889ab2008f83b323c8d794abb0df35d43091c689ef64d
- MD5 4d0ec8edaec389b1eba92c1d18676f09
- SHA1 6eafd8ed47700b9a2ff1e10dd7468e50fab1bf6d
- SHA512 d4c7655d7db8d4f7d4bb2d0add36bef916caf291b2855785685a3e812279369848ce081ac6fb5cc869fb827653a4a1f874273af17bee67987e3c3a441ad368e8
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral20
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes/classes/EnumItem.js
- Size 1KB
- SHA256 f7ada012dcc309b7c1cd272d1a81657b0ddb3d51521e682116522099285d525e
- MD5 09bbad4c05be7ab76cc3c5ef4fa9ddc0
- SHA1 a38cb372349a2420619e2fb629f0912500dc1064
- SHA512 40b753d8e97ba46be9fe4241dbe892bdeb62c902ea088d68ee7ea5ce0506d51b16f7105355a6b5360363c80d98b0f644b7a7ea2b4262210f24870368a2629c44
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral21
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Enums.js
- Size 777KB
- SHA256 799c0657b0ab027c3ec0794e8934bed4a4a8e7f063dcae47783a7f32fbeda25c
- MD5 b1e41317d3ffe843032f5eb6f74806a9
- SHA1 506f617da8d8093ed58cfda68e0d60e1aa2ed08d
- SHA512 fb538a73935fd41b9f2ba9f6ddcdfe066f6f672d5dfe682dad301cae3392a93405fd35ee61126e9889e14f71c51e11cdecb4e20d213ba91b34801ec5b89ce02a
- SSDEEP 6144:0XUmTfyptLD/yxnbDh+hIAKVwhWppLTl+ExT3dsX34hAhbAhQ9qhjLmWhXXu:wVyx
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral22
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Instance.js
- Size 16KB
- SHA256 807dd6d35bf5fffcd4de4aa4ed1800716223a6fe014077f23f2f652ac86d2a31
- MD5 430fa91891107d6f1f3c3392dde9ff4d
- SHA1 5d42ebec7a7c3f5e5b7eb074c38572345e33c1c1
- SHA512 22011409e428216a619ca085ce8e034dc6bc3a8f9de27fb4f2e3dd6b8aa8cc7aa3b02508af816137f646ca1fa96e083a832e68bd8c8b016bfd7a3674d532a875
- SSDEEP 384:pFcCsgQgj6bPo2nv5CYR8/+qvPNEzH+AK6/NBA8K/tQsdz6FKRjrDcWYUeih+hrA:pFcCXQgj6bPo2nv5CYR8/+qvPNEzH+Ak
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral23
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Model.js
- Size 7KB
- SHA256 17b72f11f227d6261e44b0bf49d6cdc4ed88cef93c68384ba73f7550d9614d99
- MD5 6cf31f5ac3af68e878bf565c9ed6404c
- SHA1 afaa8bf2c9326ebe8658566fe6296a075d49e23c
- SHA512 0fff9572888be7dfcb792c53b006a6f4b8328d6522b971f5cb8fe9b0ce17ba9f82b6ae0a78d56cf585121a9a62772e70b03227074bb4683a52617f46c52202d2
- SSDEEP 96:AqiyuRkcbZjRZ7AiQnRztu6W6cEY4Ef+YepYk6JY3g6RtqYnFNYlyecYqzGRpYSY:AJye3VNZ7/QRvcKEe9fg6zSyz2585
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral24
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes/classes/RBXScriptSignal.js
- Size 1KB
- SHA256 660f088e8da6e3c7c16ff4df184a92fe96c2b2ffb8c3b3411f30b68d93723dba
- MD5 c41248fefc16d5e096019eace4e8ec90
- SHA1 e22931bf5fefeb7a5fc4ce7770283328e588241a
- SHA512 98f6a1367b4be1da50d1a257e726b9c1a66ae22cb8e2d1439b1dd0b4ba4d5a7e22340b165b489911d0a8603fb5c827c7ae43d89daf10dde34352a21304265a4d
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral25
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes/classes/ServiceProvider.js
- Size 6KB
- SHA256 60a9fa2721d16f3162f5701b7ada27de313794b97047cc7bba25f82859e4c75e
- MD5 1b0977e0af22c275e5f7df15de461932
- SHA1 2fe9b8a3910fbf4187247dea7402baa402764210
- SHA512 8aceee740df28fdd7e28abb3b42617eca70b33756f5b414366019fead5f94f716f3fde34e3600642a6c12b7ae5904b1700332a1a3a5c20c3f5f4d609652384b6
- SSDEEP 192:AJDF/h+8NpUG1mQqJfL/3x78ONlzN1eFqT:MFJ+EpB1ifL/JNoFy
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral26
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Workspace.js
- Size 12KB
- SHA256 251d21959744760aa1e79274b7a9fad433fd42b2d3fb4783f56f0b070d06cf8e
- MD5 b965d0ffcb61fec7f70f4f28a44e9982
- SHA1 2a4c47087318178698368ff06fef670155bdfc53
- SHA512 9da1ea797cbaba01c92dc7a68a586ceed6048565de1b8e40074a76666a8ac1df910a91c547abd5a2f8882686ed5d2cf1079cb47d626eaaf478da74b037d06af6
- SSDEEP 384:XQazTbBakPYkrvL9Li9ZV7+RSC1LQS7FihmJVPMp1TQElbvvQeTRmvhQ:XQazTbBakPhrvL9Li9ZViRp1LQS7Fihx
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral27
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes/functions-krnl.js
- Size 24KB
- SHA256 f0a206f25ddb30f7b3935e5f21d9bf50bcba3fcf891041be0c40e31d71e53e5a
- MD5 2d8fdd6e889dd22ab3f48239e3ef4e0b
- SHA1 d9a64914d84b6238489421b8af3f85f7c3e2b254
- SHA512 dd5c6bd2fbe55e566ce099e9d5a3b60e5836e2414e9cf36ce8e1755d398385aa04e6c3a7e439ab32794da06dc3773325d65c01d87d8cffb2bff4033bdd222e6a
- SSDEEP 768:47d4ogTbvgoeqYOhGE1AmsX8jYrEMGot1bdtvR+RXTJ70aEmpZpY5rJt7HG+svFs:PsxpzBBQZf69T
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral28
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes/functions.js
- Size 10KB
- SHA256 269c81ad08e8302bbd3bfc1463e2a4d5c263a20894536a913501bb36df26a196
- MD5 3f841145388311a85d830c615614eab3
- SHA1 61af50d8d6f9728507bca4c3e13e14f5f64f108d
- SHA512 22be56298a92a4cbdd01ae7ce4c9dfb5a276fc287e22e4720e4e2adb5af7d2dc30127154f5eb4f50d0826ee4094a9e093e64cbe21b9956dcce0421ac19423647
- SSDEEP 192:AJ3deBFp8Nweb2RvsYTvOZOEGOzeHUuQvZ3Okp5TrrEFfgRVpauiOQGIPLO08:IdeBFp8yebgvsYTGAEJzeHUuQvZ+kp5L
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral29
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes/globals.js
- Size 854B
- SHA256 334af46a755d6e0262aeadb767dba63e312ad2c0505158323d9c0e6d0728c370
- MD5 354cee337dbaf64533755dddbd0459f3
- SHA1 97839f4d82cd15be561829dbdc4461ac5947b5dd
- SHA512 7212b222657ac90b7ca92568ef04de7f3969147b10945a087555633afa5d1d26adb4d1bca8c4991440d188b84f920057bed6b731edbb46f32a84382eaa577845
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral30
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes/keywords.js
- Size 428B
- SHA256 3f4ae1c666488bb398eae05c6ef9fdcf2e6c126f9b2510e6eee43a8d64d21325
- MD5 5176733f9ca5189ac3e39247a7121f9a
- SHA1 708db91150b2b968b9f70995c65d02405a5a036a
- SHA512 f2d14011392f752291b8d489120389b5ca12c553b18459945c5147f1a94f5f58882e1b4f79f030c05d8bb4cb189d38b113152ed8bce4df3e430c09a7382ed206
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral31
- Target
  bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/Drawing.js
- Size 1KB
- SHA256 611aeca1bdc19d0cd5fd440ebf5b07a9894ff44230e7f8cf8db832b895a6d834
- MD5 f4c544ffa5cdbf5b0b978a5977c35cfd
- SHA1 0e27a3d67232c4e2ef836a4260acc434e77a8b47
- SHA512 a84aa78fa060f23a3f0ed8f12ab7585f45c0624aa3e684d7ca7f84785154f0c0b50527d5c389995c4131c994b67041089cd8a98609695b685a18f84f3efce022
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Event Triggered Execution: Image File Execution Options Injection

Checks computer location settings

Event Triggered Execution: Component Object Model Hijacking

Executes dropped EXE

Loads dropped DLL

Checks whether UAC is enabled

Checks system information in the registry

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32