4097035fd7cac64d82e5250a3a691d2985b2c4894b91c258391ee6592fc1f61a

Resubmissions

12/08/2024, 17:50

240812-we39tawfpb

12/08/2024, 17:47

240812-wdcepssark8

Sharing

Copy URL Twitter E-mail

General

Target
Burpy.zip
Size 249KB
Sample240812-wdcepssark
SHA256 4097035fd7cac64d82e5250a3a691d2985b2c4894b91c258391ee6592fc1f61a
MD5 1b72b4a1eabaa749cbe30402d4ad2a86
SHA1 231ccc9a9e3c314766c4d354518ec8d14183b7a3
SHA512 54e5033e6db1045fa3a994cf9e266fcd6681ea60974b6cd32a1249589f175a446b64b6c782ba29e4e733735b1ade467d9e79358a3d1fae9e816dd57bcf2018a7
SSDEEP 6144:an7pz7MwCh1GES+PgyaXHyY8n8rTEkHlHyM0MZjEnakEkHl0:ypBCnG7+faXHyYS8rTEkHlSkFEnPEkHq
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  Burpy/.git/hooks/applypatch-msg.sample
- Size 478B
- SHA256 0223497a0b8b033aa58a3a521b8629869386cf7ab0e2f101963d328aa62193f7
- MD5 ce562e08d8098926a3862fc6e7905199
- SHA1 4de88eb95a5e93fd27e78b5fb3b5231a8d8917dd
- SHA512 536cce804d84e25813993efdd240537b52d00ce9cdcecf1982f85096d56a521290104c825c00b370b2752201952a9616a3f4e28c5d27a5b4e4842101a2ff9bee
- MD5 SHA1 SHA512
Score

3^/10
behavioral1
- Target
  Burpy/.git/hooks/commit-msg.sample
- Size 896B
- SHA256 1f74d5e9292979b573ebd59741d46cb93ff391acdd083d340b94370753d92437
- MD5 579a3c1e12a1e74a98169175fb913012
- SHA1 ee1ed5aad98a435f2020b6de35c173b75d9affac
- SHA512 d6bb7fa747f4625adf1877f546565cbe812ca7dd4168f7e9068e6732555d8737eba549546cf5946649e3f38de82d173aaf9c160a4c9f9445655258b4c5f955eb
- MD5 SHA1 SHA512
Score

3^/10
behavioral2
- Target
  Burpy/.git/hooks/fsmonitor-watchman.sample
- Size 4KB
- SHA256 e0549964e93897b519bd8e333c037e51fff0f88ba13e086a331592bf801fa1d0
- MD5 a0b2633a2c8e97501610bd3f73da66fc
- SHA1 0ec0ec9ac11111433d17ea79e0ae8cec650dcfa4
- SHA512 5168643c1768ec83554a9066754507a781b6d14251a46a469222d462efc6ca87a72c90679154e8a723349c91e7772b32ac9b08dfe313cded0ee0a6f17885079e
- SSDEEP 96:GFCscBOvOFXDgRvi/3UCwN4ZlkRo/j5SpoNOBoi+geBIzCa:GFCsEOmWRa8CwN4ZqRo7geEk3IzCa
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3
- Target
  Burpy/.git/hooks/post-update.sample
- Size 189B
- SHA256 81765af2daef323061dcbc5e61fc16481cb74b3bac9ad8a174b186523586f6c5
- MD5 2b7ea5cee3c49ff53d41e00785eb974c
- SHA1 b614c2f63da7dca9f1db2e7ade61ef30448fc96c
- SHA512 473ad124642571656276bf83b9ff63ab1804d3c23a5bdae52391c6f70a894849ac60c10c9d31deff3938922ce83b68b1e60c11592bbf7ea503f4acd39968cefa
- MD5 SHA1 SHA512
Score

3^/10
behavioral4
- Target
  Burpy/.git/hooks/pre-applypatch.sample
- Size 424B
- SHA256 e15c5b469ea3e0a695bea6f2c82bcf8e62821074939ddd85b77e0007ff165475
- MD5 054f9ffb8bfe04a599751cc757226dda
- SHA1 f208287c1a92525de9f5462e905a9d31de1e2d75
- SHA512 cb78aa7e9b9c146e5db65d86dd83f04e2b6942a06fab50c704a0fd900683f3b6ad1164e74afe2f267f6da91cdff0b9ab07713e12cefc6f8d741b5df194f4fda6
- MD5 SHA1 SHA512
Score

3^/10
behavioral5
- Target
  Burpy/.git/hooks/pre-commit.sample
- Size 1KB
- SHA256 57185b7b9f05239d7ab52db045f5b89eb31348d7b2177eab214f5eb872e1971b
- MD5 5029bfab85b1c39281aa9697379ea444
- SHA1 8093d68e142db52dcab2215e770ba0bbe4cfbf24
- SHA512 4fed684b7e262fc847610ca646074fca45c3c677c40d8fb6c7ae522b9c8a9be7327b41a59b4550ceadd41edf57ec5ed07e575e02dbc6c003951e1822ac3ddd5b
- MD5 SHA1 SHA512
Score

3^/10
behavioral6
- Target
  Burpy/.git/hooks/pre-merge-commit.sample
- Size 416B
- SHA256 d3825a70337940ebbd0a5c072984e13245920cdf8898bd225c8d27a6dfc9cb53
- MD5 39cb268e2a85d436b9eb6f47614c3cbc
- SHA1 04c64e58bc25c149482ed45dbd79e40effb89eb7
- SHA512 e4dc204494f5062efa3032b00c64707a4f38978040482501b3e085f071e3ee5a9737d537e6a52002ceb4ebe2bfe09e555c5d969581e80b3eba2a922015c67960
- MD5 SHA1 SHA512
Score

3^/10
behavioral7
- Target
  Burpy/.git/hooks/pre-push.sample
- Size 1KB
- SHA256 ecce9c7e04d3f5dd9d8ada81753dd1d549a9634b26770042b58dda00217d086a
- MD5 2c642152299a94e05ea26eae11993b13
- SHA1 a599b773b930ca83dbc3a5c7c13059ac4a6eaedc
- SHA512 cc98bbe0e3865e2023af04416e10689e3aecd3f3928cf90c2acc0d3d7306388886779025c8967c8ea198af1f4fe29d16c65d4e1d546c7a8fa513f5ba7df16850
- MD5 SHA1 SHA512
Score

3^/10
behavioral8
- Target
  Burpy/.git/hooks/pre-rebase.sample
- Size 4KB
- SHA256 4febce867790052338076f4e66cc47efb14879d18097d1d61c8261859eaaa7b3
- MD5 56e45f2bcbc8226d2b4200f7c46371bf
- SHA1 288efdc0027db4cfd8b7c47c4aeddba09b6ded12
- SHA512 00d21d5d72386c3d9b5a1c36ba85201f730556a8295d4353af54af7892ab81010d42aff209ec1fda61c54e4dda3737cea5fda64f09d40ce5004ae28239565025
- SSDEEP 96:vJ7EgXasqXq6zaqK1ep8m5MDVUT2bTEwEWDhG38deyig9yhCLtQH:vJ4gXasI1zaqKwUTHhzeyil4tm
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral9
- Target
  Burpy/.git/hooks/pre-receive.sample
- Size 544B
- SHA256 a4c3d2b9c7bb3fd8d1441c31bd4ee71a595d66b44fcf49ddb310252320169989
- MD5 2ad18ec82c20af7b5926ed9cea6aeedd
- SHA1 705a17d259e7896f0082fe2e9f2c0c3b127be5ac
- SHA512 ee08c11fab7e896b2e09c241954ba7640338b12c75cd8040daf053c31b2f22236d7a0deac736f89d305236312fdb4f560a38d4d8debdcc9dcdd23b2d975907d5
- MD5 SHA1 SHA512
Score

3^/10
behavioral10
- Target
  Burpy/.git/hooks/prepare-commit-msg.sample
- Size 1KB
- SHA256 e9ddcaa4189fddd25ed97fc8c789eca7b6ca16390b2392ae3276f0c8e1aa4619
- MD5 2b5c047bdb474555e1787db32b2d2fc5
- SHA1 2584806ba147152ae005cb675aa4f01d5d068456
- SHA512 50ec8a0dd98427e80a82a8d8ce44462a845876e1594c9d0e89483ce9a8aaad616edea0e5c45c1bb69d8fe7f520c6f2260d6fa350d77b400899c3ae375e965bfb
- MD5 SHA1 SHA512
Score

3^/10
behavioral11
- Target
  Burpy/.git/hooks/push-to-checkout.sample
- Size 2KB
- SHA256 a53d0741798b287c6dd7afa64aee473f305e65d3f49463bb9d7408ec3b12bf5f
- MD5 c7ab00c7784efeadad3ae9b228d4b4db
- SHA1 508240328c8b55f8157c93c43bf5e291e5d2fbcb
- SHA512 586efb6a206f73d8a94561266153a624e2753830bc431a283bed998c46ac00a9df4995ddfd0aa852b1a22b4672c80f2c33cee3fe2e3321e392ff4cef26dbf75e
- MD5 SHA1 SHA512
Score

3^/10
behavioral12
- Target
  Burpy/.git/hooks/sendemail-validate.sample
- Size 2KB
- SHA256 44ebfc923dc5466bc009602f0ecf067b9c65459abfe8868ddc49b78e6ced7a92
- MD5 4d67df3a8d5c98cb8565c07e42be0b04
- SHA1 74cf1d5415a5c03c110240f749491297d65c4c98
- SHA512 a19dbbc2ef6c367aadbfb900ae58c377d88ac9b6c0ac6de49c962d44d993418875f64143defda56bae8d0697dcd15be2928d32aa77508d3958769f18a4a53154
- MD5 SHA1 SHA512
Score

3^/10
behavioral13
- Target
  Burpy/.git/hooks/update.sample
- Size 3KB
- SHA256 8d5f2fa83e103cf08b57eaa67521df9194f45cbdbcb37da52ad586097a14d106
- MD5 647ae13c682f7827c22f5fc08a03674e
- SHA1 730e6bd5225478bab6147b7a62a6e2ae21d40507
- SHA512 be3780974589d06eddba6fa0aa15a3e3dfe390e2827a1a6ae5cb83d6ac47e79ef9b1bbb53f067372f8dc70db0350d3770e78537fd3cfe734200ff824eca4cada
- MD5 SHA1 SHA512
Score

3^/10
behavioral14
- Target
  Burpy/BurpLoaderKeygen.jar
- Size 29KB
- SHA256 1e288c686963eafc34411d4f94265eb1809492ab57a474848669eb3285a2afb3
- MD5 56a0eef3a96bf373db1298bc6cb63158
- SHA1 f9fb9175a901f4fede20b9d61eb4fadafdd1feea
- SHA512 d6165e567c80cd04c2506f285d48fb3e2dd6d46e4eda3b9bf76c2ea585ac446807ccabc02c4f8a6bede36a8ac1d1737eab3840cfdc703123daeccd526593f492
- SSDEEP 768:ccLie6lYEKyYSfk8tyPAR8NVgJMvtWHw1QgHpA:NLie6lYEKyYSfkwNY+MvtuWQgG
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral15
- Target
  Burpy/Linux_setup.sh
- Size 3KB
- SHA256 830b93447a05780417fc9ce385f338e3b892a94f489d0261f36637f22b6559f1
- MD5 c1dd3fe8bd5a7dda26072b2d7489bc03
- SHA1 bc6b31575123ddfb91b7e8746596df90284eb300
- SHA512 c8a190e264458638429fef9c1a2c82dc49013ab7fc913cc3e153cd826ef4e848ae40796e906907ea1c90160e3c0abde2c04d8743b1965e11cf1231ea0d25dd77
- MD5 SHA1 SHA512
Score

3^/10
behavioral16
- Target
  Burpy/Windows_setup.ps1
- Size 4KB
- SHA256 5ab8bdffdbec79d415460bea619c42c841d334923ed20b22b03b3c5ece29aba0
- MD5 a73b48e0fb186611feae995695839cd7
- SHA1 a01d14bcfbc5c70f5a5bb323a5b3655bdad9fe1b
- SHA512 47143cb6eb944e9f57e0dd3e66913da0ccb179edaf85b817ef85f3d20a97c469ef5c399e57e9e82e34ec3377da1a707878354f745fb06eb760f7f4af02a86213
- SSDEEP 96:+Babm/UoaSkGNe2P02RuPNULrVy/DAiXMP02RutZn:jXtSkw9zQrxXgsZn
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

execution
- Blocklisted process makes network request
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral17
- Target
  Burpy/burpsuite_pro.sh
- Size 1009B
- SHA256 efc7634dffb59ee788a856b8c4261b2a6a5a9d38d36841d77d4d062cce6222a4
- MD5 715f4b77ab044198faed30fc9bd6b4b3
- SHA1 113f60a9ee793ecf5261e64179a35a12199f5590
- SHA512 46c588da8ce41acab326abdb223a7bfa5afadeaac30add9a7ae3b07ef40c1467775af6f25705451aea8018a3dd4ffd437b5beb709e64c2bc5bf0846209958a2b
- MD5 SHA1 SHA512
Score

3^/10
behavioral18
- Target
  Burpy/keygen.jar
- Size 63KB
- SHA256 7ce1ac8090ec484d8b21a81d97866ffa55a761e63a2daf831488a34475b434c5
- MD5 a4ead4abf81293e88cc2247302c19877
- SHA1 13be3e844fbe07e524f33682af5aab7cb24b8f73
- SHA512 f139166520dad00dce2faf5efa4151f0b1375e1df417c1389863b6fa36b9d2d343efb3ceae6ddc40aed447491da3b3e228d97bc7fee103231f15b092a6295e35
- SSDEEP 1536:yCdJN7TYDPdMUHwG+j5FOwLq9hpIThxE7afiW5zLtXE:9N7LUujewL4fkx2afiQzLt0
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral19
- Target
  Burpy/loader.jar
- Size 29KB
- SHA256 1e288c686963eafc34411d4f94265eb1809492ab57a474848669eb3285a2afb3
- MD5 56a0eef3a96bf373db1298bc6cb63158
- SHA1 f9fb9175a901f4fede20b9d61eb4fadafdd1feea
- SHA512 d6165e567c80cd04c2506f285d48fb3e2dd6d46e4eda3b9bf76c2ea585ac446807ccabc02c4f8a6bede36a8ac1d1737eab3840cfdc703123daeccd526593f492
- SSDEEP 768:ccLie6lYEKyYSfk8tyPAR8NVgJMvtWHw1QgHpA:NLie6lYEKyYSfkwNY+MvtuWQgG
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral20

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Modifies file permissions

Blocklisted process makes network request

Downloads MZ/PE file

Executes dropped EXE

Loads dropped DLL

Command and Scripting Interpreter: PowerShell

Enumerates connected drives

Drops file in System32 directory

Modifies file permissions

Modifies file permissions

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20