e4a71391eb1342d28a8f6a95fd00491e9abbcf6a9708951171077ebcbae93458 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
GLScene_v2.4_VCL_Win32_Win64.zip
Size 62.4MB
Sample240901-plnz5s1cmd
SHA256 e4a71391eb1342d28a8f6a95fd00491e9abbcf6a9708951171077ebcbae93458
MD5 236f2105309bca7535090b212cbd3ea6
SHA1 0aaae97fbb2f77147469f92a26aaa3c220946e08
SHA512 78f91e2ced7815350c2c57f0222832da250e048feb413d83fb7708f9932b162ffa11d5fac4c6584f50c87fcc83dadf96f0daa76d2f14075c6422afd6554089aa
SSDEEP 1572864:/rhzzbqvijWlNkCG7UgCA3ZAZ/x6SsNrQECLhArg26XUg4t:DdWgLCSCA3Zk6Sy6hAc9k3
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery execution link pdf upx

Malware Config

Targets

- Target
  GLScene/Examples/AdvDemos.htm
- Size 9KB
- SHA256 9cd7bb32b45d1e7f9576bdf4a8604f4bb2384d0529bef66d7fad83f54701e612
- MD5 6ef8c5181ab308175db5920f36048e6a
- SHA1 01c055890e0297dd4f6f99665aa1e1a5fd58978e
- SHA512 f2406aa4d9614b83f0132311ac3e23a7853ba7b40b385ca6af2887a40d2f35ae803d4a374e95478896c7837de7e851f1d7ff22d2ad0f1433a6c37a0f3c5f6a91
- SSDEEP 192:btPho81IipPX91pkI8Df8bN1eFWD2qzviQY9hDTSZR61tgxvvHMoH8//H8UC:bhho81tr5sY2qzviQMhDWZR61tiHHMoX
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  GLScene/Examples/AdvDemos/ActorMS3D/ActorMS3dC.cpp
- Size 880B
- SHA256 357b05c68a7e970a51053b11d30b8c692d197ffe40506cfe48ef513496eadaf2
- MD5 1ceb2f8fef9d792af6af42f0e5f449fd
- SHA1 efee1cbc21915e68e11f78b4462d187a7a7707a2
- SHA512 b335be42c8d1fd3561cd2539380714c69358a3bc3760a64dbe8a96e79053b4fb7566ed59898506ada469e5ec2ce7b4c687da1fd571dc21d136babdf51f8de226
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral3 behavioral4
- Target
  GLScene/Examples/AdvDemos/Archipelago/ArchipelagoC.cpp
- Size 840B
- SHA256 7732aa3e47247fe1465ba28af63b8c6cb551aa1e1f7d09b33aee87d33da4de59
- MD5 d896cce936aa9ed7900af2ee713aa43a
- SHA1 ee5be50dc718b388702e7054cd58948b14368f92
- SHA512 62ae2381b5613eb30379bab51899896305d2f22cb3d5c24e5518dcd55cfd00035bc5727e359ebdf50ed2e481f7c02bba81ff89c2a567be523f6cfa3b41d0c734
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral5 behavioral6
- Target
  GLScene/Examples/AdvDemos/Archipelago/Data/Tex_0_2.bmp
- Size 192KB
- SHA256 1a9d8e94804f1d25854bdd9e34f54e3f53ebea2b99b6d4ec46d894376590af4b
- MD5 3a1d7881db72ee123b31ddf233e9f8ab
- SHA1 3b6b828632d10adf1b23988f812531feda580e73
- SHA512 6dd35fd0d1a79142464e17308d177e34652d50a15c424e1e262d7aa9a02d847e200d3423a6c79367b567af0682337557a9b7a6314f83cc26c7b0075a2f0a97f7
- SSDEEP 6144:GrCWAzfHe7/BPtdyhlYQx0NnKXmTfbzOAcMjQn5A5:U/BPtUhiQmpKXmTfbTclnq
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral7 behavioral8
- Target
  GLScene/Examples/AdvDemos/Archipelago/Splitter/SplitterC.cpp
- Size 675B
- SHA256 55b178666db1457beca5adac3c367fc087795d047933b2e1ab9f658506766a73
- MD5 e4f095552880c6ec0c8d4e7e2953077f
- SHA1 b30151a711b06acbd9eb22347a89e6a7f5096b4c
- SHA512 dc682843babf711974b25761fbb19c0982e15562daefb0b1173593266ef92523af9682fa25d70a615c981b288e7021a8553a060db1fffb4a1559f4a523836390
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral10 behavioral9
- Target
  GLScene/Examples/AdvDemos/Arena/pcArena.cpp
- Size 888B
- SHA256 5adac15098dff0ff6ecc4c9cd3e3d442880b6e35fe1f634bc287857c952a5a12
- MD5 7ad4159195f5518186cf02be3280e65e
- SHA1 b2d75e89bf8f274ca4cec6e2269d4884025e2869
- SHA512 66764f5413ddf2583673df2ecb5836b1fa6c09bc2cf9d023f1335999089d79b290505415f3f91b9f91fb7466db78c4db6f2207c049f5d52fa0a29d4dbc676ff8
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral11 behavioral12
- Target
  GLScene/Examples/AdvDemos/Christmas/ChristmasC.cpp
- Size 879B
- SHA256 51316d6a15f04d83a378f9b874a68e24cdce4c122483032a375965103cea9ebd
- MD5 9ffc5c03ca027b97b0e71be16e9cc600
- SHA1 134461f8c682df4d1e98efe28adaee167f6ef9a0
- SHA512 174736a88f697b546fbaae608f29ce54ddf322139196cb76e9efa849856f3972633d0f3eb952944eeccbd154b8a2fd4ac75fc666ad0cbfa61c2a9c0570a90331
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral13 behavioral14
- Target
  GLScene/Examples/AdvDemos/Earth/EarthC.cpp
- Size 885B
- SHA256 de3d2309b8d03b49cbeb0de9a15ed359c33c1862eb4f02e486187a93c7a672fa
- MD5 51ba101bf6269187f26f438cc80ce207
- SHA1 aaff5e9e7da8318a5db71417600dfebd38ab35e3
- SHA512 6eef5be41e6c9ba0e49d74284bfe795a5fffd386db2f51c8ce9c1c9e3212106c8933f5d583e763af58cae4f0aa1c660228b979ba2e212a8d09d4627baa831007
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral15 behavioral16
- Target
  GLScene/Examples/AdvDemos/Forest/ForestC.cpp
- Size 892B
- SHA256 3c965285ef438e35ab863b1bed85916af0742026fb74d79ebfdbae95a9d38d3e
- MD5 449e258b4229651607281990d27588dd
- SHA1 39f5f3caadb6ea9efcd76bf3f80fb6ad9d305b2e
- SHA512 bda8b5a837bd094494b6b06347b0b3d993d676c3e5f1a8ecb6685c7f139a74a5f364e64e1c8f3afbec1e1c902ce577baa139a95c9954580463e8be61255769e9
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral17 behavioral18
- Target
  GLScene/Examples/AdvDemos/GLSViewer/Locale/gnugettext.pas
- Size 109KB
- SHA256 071ec6b7905ca115325833fb69ae5855b5cc41755653067a7db5f8fada8eb488
- MD5 bbfc804016a9829c582c97d3611e431e
- SHA1 eaba29a29ee9af05d1749ea250903fa242cd536b
- SHA512 d6d02d4232bc5fdc0f4346409a227a8381864e91c39f041ad256880d373f43f8bddc8f7b382c4006af6df3eda589c4feed5efb741cd00aaabd2d9bf0505dc80f
- SSDEEP 768:/Sr9OND0R8ZOQsK176Jyd2fDtXr8Cnx9SJte9TBM67Oxgak/WworK2R8mk93q/ib:/uEZNsJ9TBMMOxwZ/LagRbUQ94OO8
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral19 behavioral20
- Target
  GLScene/Examples/AdvDemos/IntensityMesh/IntensityMeshC.cpp
- Size 884B
- SHA256 dbd7fbdda0037bf4017403529b34d3b74f79f965dcd65b1bd775270a36c06d51
- MD5 c896b43a9531e4f7d89922503122c023
- SHA1 9a4c9484364a11862829c92b0fe383b71d09e40b
- SHA512 ab71873b1c7744813eaa88d3f2232b8acbfb54b4f8ca2732d2cdcbc2d9db2598b163c70156fb1857316f772f096b6a28f477553bdaa7653ae5392e7b12bd57f6
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral21 behavioral22
- Target
  GLScene/Examples/AdvDemos/PanoramViewer/PanoViewerC.cpp
- Size 881B
- SHA256 ef0bb6a33dcd4d9bf469db055bff26ceed5a1ef57d61679fd6d959b519085a1e
- MD5 b963d5412d71cf34290ac6872f29680b
- SHA1 d142bd783f0d1a7140054888a95f8dc97aa13997
- SHA512 b3c4b88ab7107099abda279f5b3b2f606d50eb31ee096a3a0199ee8fbfc115c76b15ec3b34d7e4c879bb04cecdde9137a17204085e17372b9dffb61332c9156a
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral23 behavioral24
- Target
  GLScene/Examples/AdvDemos/Quake3Actor/Q3DemoC.cpp
- Size 877B
- SHA256 8fb9512540d76ea5c08ca82c6d3e2a19ccce4168dbbe3f0591ab068c72ad00bf
- MD5 48dbe5c7d72c1c9e38d62640ead38159
- SHA1 2de1ab75487cf59ca051755dbd2d60f805a2b225
- SHA512 38b6263928bd52918342df52b6a2f34554f123ef6d4246857d01330bcba2869996bda4730f5582d04a38437112e8937c7ec654a029005338ef274814c2066e2f
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral25 behavioral26
- Target
  GLScene/Examples/AdvDemos/Quake3Actor/QuakeActorC.cpp
- Size 908B
- SHA256 e359de6e83d91b7f1c613cdf2d148bdd1b0b145b0210d079cfa56c5994b50c4c
- MD5 38b5b9d588a5135a72171f71a40b63ab
- SHA1 f6a573a65b2e84bc2cb901a5946fc6d55bc579cd
- SHA512 c24a603086a66fd9d79a0073d4ad45739b6703f5c226188749ac11756c910f81c7ef9a484c5f1bac6ddcbcc7a3de27952158de84a42f9f5cd7bcad70137fbaf2
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral27 behavioral28
- Target
  GLScene/Examples/AdvDemos/TexCombine/TexCombineC.cpp
- Size 908B
- SHA256 b36599d79fdfa113685b23a3c74e36cc4e5d36aaca1efc916299cdc6ce671ae5
- MD5 d89c18dd1673c163b4ce8dc95dd0775c
- SHA1 f4046e9cd5d73ca8f54e3cfde6e49720945f8e3d
- SHA512 c3f462092bce8d002fb49b97001e14de2e990a275669e45b40a9e98f18fbbd67e12e77c7e177925d0b1fc12246ffa89738282b430b5a34a055d315b7412c3efb
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral29 behavioral30
- Target
  GLScene/Examples/Demos.htm
- Size 8KB
- SHA256 70a4790307e698d8c0ac03e2f160b4fd832d596de05bea0c2bd720c087e449dc
- MD5 a7f66b666f4151292c441a5ecda25609
- SHA1 49a4a3104cee4fa31a952e6f818f06c05db67e5c
- SHA512 27b4285bc99ef560605d7c5e647b1c80fd7c550c2f5eb0264329d1fdd1b95f9f62b53c48f23ae8b5bc0170b9b55f6ea41e9fa396831c9bed266aa1421e9f4866
- SSDEEP 192:6tPho81IipPX91pkI86kf8bj7ejN0UH3wkN/3ynMUq80V5F//uBrvQ30DbT:6hho81t/f72N0UH3wkN/3ynMU70V5F/0
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32