Resubmissions

12-08-2024 17:47

240812-wdcepssark 8

General

  • Target

    Burpy.zip

  • Size

    249KB

  • Sample

    240812-wdcepssark

  • MD5

    1b72b4a1eabaa749cbe30402d4ad2a86

  • SHA1

    231ccc9a9e3c314766c4d354518ec8d14183b7a3

  • SHA256

    4097035fd7cac64d82e5250a3a691d2985b2c4894b91c258391ee6592fc1f61a

  • SHA512

    54e5033e6db1045fa3a994cf9e266fcd6681ea60974b6cd32a1249589f175a446b64b6c782ba29e4e733735b1ade467d9e79358a3d1fae9e816dd57bcf2018a7

  • SSDEEP

    6144:an7pz7MwCh1GES+PgyaXHyY8n8rTEkHlHyM0MZjEnakEkHl0:ypBCnG7+faXHyYS8rTEkHlSkFEnPEkHq

Score
8/10

Malware Config

Targets

    • Target

      Burpy/.git/hooks/applypatch-msg.sample

    • Size

      478B

    • MD5

      ce562e08d8098926a3862fc6e7905199

    • SHA1

      4de88eb95a5e93fd27e78b5fb3b5231a8d8917dd

    • SHA256

      0223497a0b8b033aa58a3a521b8629869386cf7ab0e2f101963d328aa62193f7

    • SHA512

      536cce804d84e25813993efdd240537b52d00ce9cdcecf1982f85096d56a521290104c825c00b370b2752201952a9616a3f4e28c5d27a5b4e4842101a2ff9bee

    Score
    3/10
    • Target

      Burpy/.git/hooks/commit-msg.sample

    • Size

      896B

    • MD5

      579a3c1e12a1e74a98169175fb913012

    • SHA1

      ee1ed5aad98a435f2020b6de35c173b75d9affac

    • SHA256

      1f74d5e9292979b573ebd59741d46cb93ff391acdd083d340b94370753d92437

    • SHA512

      d6bb7fa747f4625adf1877f546565cbe812ca7dd4168f7e9068e6732555d8737eba549546cf5946649e3f38de82d173aaf9c160a4c9f9445655258b4c5f955eb

    Score
    3/10
    • Target

      Burpy/.git/hooks/fsmonitor-watchman.sample

    • Size

      4KB

    • MD5

      a0b2633a2c8e97501610bd3f73da66fc

    • SHA1

      0ec0ec9ac11111433d17ea79e0ae8cec650dcfa4

    • SHA256

      e0549964e93897b519bd8e333c037e51fff0f88ba13e086a331592bf801fa1d0

    • SHA512

      5168643c1768ec83554a9066754507a781b6d14251a46a469222d462efc6ca87a72c90679154e8a723349c91e7772b32ac9b08dfe313cded0ee0a6f17885079e

    • SSDEEP

      96:GFCscBOvOFXDgRvi/3UCwN4ZlkRo/j5SpoNOBoi+geBIzCa:GFCsEOmWRa8CwN4ZqRo7geEk3IzCa

    Score
    3/10
    • Target

      Burpy/.git/hooks/post-update.sample

    • Size

      189B

    • MD5

      2b7ea5cee3c49ff53d41e00785eb974c

    • SHA1

      b614c2f63da7dca9f1db2e7ade61ef30448fc96c

    • SHA256

      81765af2daef323061dcbc5e61fc16481cb74b3bac9ad8a174b186523586f6c5

    • SHA512

      473ad124642571656276bf83b9ff63ab1804d3c23a5bdae52391c6f70a894849ac60c10c9d31deff3938922ce83b68b1e60c11592bbf7ea503f4acd39968cefa

    Score
    3/10
    • Target

      Burpy/.git/hooks/pre-applypatch.sample

    • Size

      424B

    • MD5

      054f9ffb8bfe04a599751cc757226dda

    • SHA1

      f208287c1a92525de9f5462e905a9d31de1e2d75

    • SHA256

      e15c5b469ea3e0a695bea6f2c82bcf8e62821074939ddd85b77e0007ff165475

    • SHA512

      cb78aa7e9b9c146e5db65d86dd83f04e2b6942a06fab50c704a0fd900683f3b6ad1164e74afe2f267f6da91cdff0b9ab07713e12cefc6f8d741b5df194f4fda6

    Score
    3/10
    • Target

      Burpy/.git/hooks/pre-commit.sample

    • Size

      1KB

    • MD5

      5029bfab85b1c39281aa9697379ea444

    • SHA1

      8093d68e142db52dcab2215e770ba0bbe4cfbf24

    • SHA256

      57185b7b9f05239d7ab52db045f5b89eb31348d7b2177eab214f5eb872e1971b

    • SHA512

      4fed684b7e262fc847610ca646074fca45c3c677c40d8fb6c7ae522b9c8a9be7327b41a59b4550ceadd41edf57ec5ed07e575e02dbc6c003951e1822ac3ddd5b

    Score
    3/10
    • Target

      Burpy/.git/hooks/pre-merge-commit.sample

    • Size

      416B

    • MD5

      39cb268e2a85d436b9eb6f47614c3cbc

    • SHA1

      04c64e58bc25c149482ed45dbd79e40effb89eb7

    • SHA256

      d3825a70337940ebbd0a5c072984e13245920cdf8898bd225c8d27a6dfc9cb53

    • SHA512

      e4dc204494f5062efa3032b00c64707a4f38978040482501b3e085f071e3ee5a9737d537e6a52002ceb4ebe2bfe09e555c5d969581e80b3eba2a922015c67960

    Score
    3/10
    • Target

      Burpy/.git/hooks/pre-push.sample

    • Size

      1KB

    • MD5

      2c642152299a94e05ea26eae11993b13

    • SHA1

      a599b773b930ca83dbc3a5c7c13059ac4a6eaedc

    • SHA256

      ecce9c7e04d3f5dd9d8ada81753dd1d549a9634b26770042b58dda00217d086a

    • SHA512

      cc98bbe0e3865e2023af04416e10689e3aecd3f3928cf90c2acc0d3d7306388886779025c8967c8ea198af1f4fe29d16c65d4e1d546c7a8fa513f5ba7df16850

    Score
    3/10
    • Target

      Burpy/.git/hooks/pre-rebase.sample

    • Size

      4KB

    • MD5

      56e45f2bcbc8226d2b4200f7c46371bf

    • SHA1

      288efdc0027db4cfd8b7c47c4aeddba09b6ded12

    • SHA256

      4febce867790052338076f4e66cc47efb14879d18097d1d61c8261859eaaa7b3

    • SHA512

      00d21d5d72386c3d9b5a1c36ba85201f730556a8295d4353af54af7892ab81010d42aff209ec1fda61c54e4dda3737cea5fda64f09d40ce5004ae28239565025

    • SSDEEP

      96:vJ7EgXasqXq6zaqK1ep8m5MDVUT2bTEwEWDhG38deyig9yhCLtQH:vJ4gXasI1zaqKwUTHhzeyil4tm

    Score
    3/10
    • Target

      Burpy/.git/hooks/pre-receive.sample

    • Size

      544B

    • MD5

      2ad18ec82c20af7b5926ed9cea6aeedd

    • SHA1

      705a17d259e7896f0082fe2e9f2c0c3b127be5ac

    • SHA256

      a4c3d2b9c7bb3fd8d1441c31bd4ee71a595d66b44fcf49ddb310252320169989

    • SHA512

      ee08c11fab7e896b2e09c241954ba7640338b12c75cd8040daf053c31b2f22236d7a0deac736f89d305236312fdb4f560a38d4d8debdcc9dcdd23b2d975907d5

    Score
    3/10
    • Target

      Burpy/.git/hooks/prepare-commit-msg.sample

    • Size

      1KB

    • MD5

      2b5c047bdb474555e1787db32b2d2fc5

    • SHA1

      2584806ba147152ae005cb675aa4f01d5d068456

    • SHA256

      e9ddcaa4189fddd25ed97fc8c789eca7b6ca16390b2392ae3276f0c8e1aa4619

    • SHA512

      50ec8a0dd98427e80a82a8d8ce44462a845876e1594c9d0e89483ce9a8aaad616edea0e5c45c1bb69d8fe7f520c6f2260d6fa350d77b400899c3ae375e965bfb

    Score
    3/10
    • Target

      Burpy/.git/hooks/push-to-checkout.sample

    • Size

      2KB

    • MD5

      c7ab00c7784efeadad3ae9b228d4b4db

    • SHA1

      508240328c8b55f8157c93c43bf5e291e5d2fbcb

    • SHA256

      a53d0741798b287c6dd7afa64aee473f305e65d3f49463bb9d7408ec3b12bf5f

    • SHA512

      586efb6a206f73d8a94561266153a624e2753830bc431a283bed998c46ac00a9df4995ddfd0aa852b1a22b4672c80f2c33cee3fe2e3321e392ff4cef26dbf75e

    Score
    3/10
    • Target

      Burpy/.git/hooks/sendemail-validate.sample

    • Size

      2KB

    • MD5

      4d67df3a8d5c98cb8565c07e42be0b04

    • SHA1

      74cf1d5415a5c03c110240f749491297d65c4c98

    • SHA256

      44ebfc923dc5466bc009602f0ecf067b9c65459abfe8868ddc49b78e6ced7a92

    • SHA512

      a19dbbc2ef6c367aadbfb900ae58c377d88ac9b6c0ac6de49c962d44d993418875f64143defda56bae8d0697dcd15be2928d32aa77508d3958769f18a4a53154

    Score
    3/10
    • Target

      Burpy/.git/hooks/update.sample

    • Size

      3KB

    • MD5

      647ae13c682f7827c22f5fc08a03674e

    • SHA1

      730e6bd5225478bab6147b7a62a6e2ae21d40507

    • SHA256

      8d5f2fa83e103cf08b57eaa67521df9194f45cbdbcb37da52ad586097a14d106

    • SHA512

      be3780974589d06eddba6fa0aa15a3e3dfe390e2827a1a6ae5cb83d6ac47e79ef9b1bbb53f067372f8dc70db0350d3770e78537fd3cfe734200ff824eca4cada

    Score
    3/10
    • Target

      Burpy/BurpLoaderKeygen.jar

    • Size

      29KB

    • MD5

      56a0eef3a96bf373db1298bc6cb63158

    • SHA1

      f9fb9175a901f4fede20b9d61eb4fadafdd1feea

    • SHA256

      1e288c686963eafc34411d4f94265eb1809492ab57a474848669eb3285a2afb3

    • SHA512

      d6165e567c80cd04c2506f285d48fb3e2dd6d46e4eda3b9bf76c2ea585ac446807ccabc02c4f8a6bede36a8ac1d1737eab3840cfdc703123daeccd526593f492

    • SSDEEP

      768:ccLie6lYEKyYSfk8tyPAR8NVgJMvtWHw1QgHpA:NLie6lYEKyYSfkwNY+MvtuWQgG

    Score
    7/10
    • Target

      Burpy/Linux_setup.sh

    • Size

      3KB

    • MD5

      c1dd3fe8bd5a7dda26072b2d7489bc03

    • SHA1

      bc6b31575123ddfb91b7e8746596df90284eb300

    • SHA256

      830b93447a05780417fc9ce385f338e3b892a94f489d0261f36637f22b6559f1

    • SHA512

      c8a190e264458638429fef9c1a2c82dc49013ab7fc913cc3e153cd826ef4e848ae40796e906907ea1c90160e3c0abde2c04d8743b1965e11cf1231ea0d25dd77

    Score
    3/10
    • Target

      Burpy/Windows_setup.ps1

    • Size

      4KB

    • MD5

      a73b48e0fb186611feae995695839cd7

    • SHA1

      a01d14bcfbc5c70f5a5bb323a5b3655bdad9fe1b

    • SHA256

      5ab8bdffdbec79d415460bea619c42c841d334923ed20b22b03b3c5ece29aba0

    • SHA512

      47143cb6eb944e9f57e0dd3e66913da0ccb179edaf85b817ef85f3d20a97c469ef5c399e57e9e82e34ec3377da1a707878354f745fb06eb760f7f4af02a86213

    • SSDEEP

      96:+Babm/UoaSkGNe2P02RuPNULrVy/DAiXMP02RutZn:jXtSkw9zQrxXgsZn

    Score
    8/10
    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    • Target

      Burpy/burpsuite_pro.sh

    • Size

      1009B

    • MD5

      715f4b77ab044198faed30fc9bd6b4b3

    • SHA1

      113f60a9ee793ecf5261e64179a35a12199f5590

    • SHA256

      efc7634dffb59ee788a856b8c4261b2a6a5a9d38d36841d77d4d062cce6222a4

    • SHA512

      46c588da8ce41acab326abdb223a7bfa5afadeaac30add9a7ae3b07ef40c1467775af6f25705451aea8018a3dd4ffd437b5beb709e64c2bc5bf0846209958a2b

    Score
    3/10
    • Target

      Burpy/keygen.jar

    • Size

      63KB

    • MD5

      a4ead4abf81293e88cc2247302c19877

    • SHA1

      13be3e844fbe07e524f33682af5aab7cb24b8f73

    • SHA256

      7ce1ac8090ec484d8b21a81d97866ffa55a761e63a2daf831488a34475b434c5

    • SHA512

      f139166520dad00dce2faf5efa4151f0b1375e1df417c1389863b6fa36b9d2d343efb3ceae6ddc40aed447491da3b3e228d97bc7fee103231f15b092a6295e35

    • SSDEEP

      1536:yCdJN7TYDPdMUHwG+j5FOwLq9hpIThxE7afiW5zLtXE:9N7LUujewL4fkx2afiQzLt0

    Score
    7/10
    • Target

      Burpy/loader.jar

    • Size

      29KB

    • MD5

      56a0eef3a96bf373db1298bc6cb63158

    • SHA1

      f9fb9175a901f4fede20b9d61eb4fadafdd1feea

    • SHA256

      1e288c686963eafc34411d4f94265eb1809492ab57a474848669eb3285a2afb3

    • SHA512

      d6165e567c80cd04c2506f285d48fb3e2dd6d46e4eda3b9bf76c2ea585ac446807ccabc02c4f8a6bede36a8ac1d1737eab3840cfdc703123daeccd526593f492

    • SSDEEP

      768:ccLie6lYEKyYSfk8tyPAR8NVgJMvtWHw1QgHpA:NLie6lYEKyYSfkwNY+MvtuWQgG

    Score
    7/10

MITRE ATT&CK Enterprise v15

Tasks