1bf4f3e3847afb4a2912afa05ce4a36841ad68d398ba25dfa1e32c0bf41c7d2e | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
OpenFeign%2013.4%20source%20code.zip
Size 870KB
Sample240902-sl6fzatglc
SHA256 1bf4f3e3847afb4a2912afa05ce4a36841ad68d398ba25dfa1e32c0bf41c7d2e
MD5 747120744a4f909cc3fa1247455bfda8
SHA1 8ca2fce2fc5f4f823d457fe982d7b929362480c9
SHA512 7ddd0795164efdc9be1210afbf9ead5d3824668b1805aac46019b14029684e67ec1102d8780967750d3ea46791319d367a6f33c5f5fa3723601994b5c7fdc14d
SSDEEP 24576:YE8iiBRj0MqRBdVHPERvlPllFooCnPEw5+JZH:YrigYRBddElXooCnf5K1
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

execution linux

Malware Config

Targets

- Target
  OpenFeign-feign-5a43a23/README.md
- Size 45KB
- SHA256 c186d46bebf9814d9b1aad5b6af85780780458d5e4dda13f65dcd067f3e31158
- MD5 c8402422143f718193290586bd827b4f
- SHA1 59c76181eb5c6e34a47bdb983b0dd83c0cdb612f
- SHA512 6df3faa1f4130b9458a09f10453b514a012b24eae885afe4f06b53ffc43b3725f72e460e2fa4c3adcac96ef840706a6f37e9bbd27f70a51113e0a36e515d9c2b
- SSDEEP 768:BlOihIiek+GrmHlZp9CMD1WR2R1E1CLlWirNhhYtAEzOyDNW2ihKDh59Gd7:Kiek+GrmHfp9XJWR2R1E1XUf2tAEzOyA
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral1 behavioral2
- Target
  OpenFeign-feign-5a43a23/example-github-with-coroutine/src/main/java/example/github/GitHubExample.kt
- Size 4KB
- SHA256 2140a977e00cbf5c219f58e1941bde19dd0fe970a4f9721a1d0a47230050030d
- MD5 77910a48e95df2d9901eaf24114b03ce
- SHA1 5eb328afbb54a1ea2c44379a32fbf5f7d2fd23eb
- SHA512 6aba4b7d6793ab6c790b0d4250bbe90fef2321491834004643f21bc0176b1bb80334859108e27ba1090dda620e61bf87c5c62231f0030876df6616f183d86dd8
- SSDEEP 96:x46/3HJUHoU9UjgRIG83FHY5hbgmdasLkNeDTySujJO8qv9mL:xh3HEoCUsY3FiVgSkNeDT3Mk8qcL
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral3 behavioral4
- Target
  OpenFeign-feign-5a43a23/kotlin/src/test/kotlin/feign/kotlin/CoroutineFeignTest.kt
- Size 6KB
- SHA256 fbd00e3fa944d1c8e90775af1ddb417dcb4da0056c967c359e82cb16c63b5342
- MD5 903cb62bd02509e9137d8950e696a729
- SHA1 afa7af399c15525ed87b0f1a48412117c9e6bb81
- SHA512 72ea65477e549253ccefa1be17fcf8184be92d656917a959eea9c10c963f5085ab42ae44f8ac3cd70f2d83b568320be18a7677a5f42c0f63e57bfd97ae8ffddb
- SSDEEP 96:x46/3HJUoLsveTBQNSJjyBzCVt9zAV9rcV78IAKeQEtyteVJt+gtqIU0nSYtWp0:xh3H/WpRe9wu9AgAy6+gtqIU0nSYR
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral5 behavioral6
- Target
  OpenFeign-feign-5a43a23/mvnw
- Size 10KB
- SHA256 fa35e3b864da86eb33e87337de78ca245ef97e01e7ed10d31a8934cfafc1314d
- MD5 ee1eaae04dc0d0c4d0f4f9094c3e7e64
- SHA1 78309fbb9c7f8572df019d92d7d9b548b4f7313f
- SHA512 3f7839877fbb09b9322086a7a2f6fbb7f4547d49faf2841bf8271f9087e0623b2a97110ffc91f6e3de20c9d5ba929ac2f8e30715e0a1da7a9e721eeb2474d597
- SSDEEP 192:OWo7HGJm4vyjW30Lvt2T2p2/YlfeCuc9RIDW0pXioDcg2nS2D2Wc2cPa2YQ2i:ON6JZaLvGCX9XUj
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  OpenFeign-feign-5a43a23/mvnw.cmd
- Size 6KB
- SHA256 b55f12a16f44d94f4f50764dd37c18bbfd54807d33bb25081b79831540fc6f8f
- MD5 4c7b042fdc50a6afdc6bc9d2c8cd353b
- SHA1 7d1c54e37fb18c4691aaaa20a4afe73c1906bea6
- SHA512 e7c511e43dd7ebcd4ba6139af5253c51bfc15a9fe77e977a60b37355f2dcf019b67d7ade6929efa5ed648503615a9b8b3a990293d020b2db46fa9fdf95bb17c5
- SSDEEP 192:o5DH5kljG2iNhxJtaLl+eJ2n2c2N242z2n0d:o5xr7JtaLl+K0d
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

execution
- Blocklisted process makes network request
- Loads dropped DLL
behavioral11 behavioral12
- Target
  OpenFeign-feign-5a43a23/scripts/no-git-changes.sh
- Size 945B
- SHA256 e8b3ab4b028d59a70cf3e06e657715551e6c68c6e3919059f70f3a3d3338fda1
- MD5 59448f6991002d23bc8e5438aba2e073
- SHA1 a65bb7bf76459ec4f73d2872a1035b03cea13abd
- SHA512 41a74466de530c82094906178dd2058e862ad653b7f98c24a2520cbd4bc1a10672e7fcfcef8f5eda90a15cc3ab5cc190997c5fa31a2c9af766204f1c900f119b
- MD5 SHA1 SHA512
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  OpenFeign-feign-5a43a23/scripts/release.sh
- Size 1KB
- SHA256 13ab1772871b3b12830e9313f2879bbae2c13d0e46e4e9342166943b9a2b0c75
- MD5 eadee62aea237484fe590a8c5ed12268
- SHA1 6b7fec93336c6c11c0ffc36685380b6c9067deb4
- SHA512 ce6480c3b2d86e23799ed3f6168ab809ca3aa69d1543a741c2904d4acb76753f72e014b3eace98cd3d1bb7a4896f21ab71f6714066783c4a534acd3f04763222
- MD5 SHA1 SHA512
Score

3^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  OpenFeign-feign-5a43a23/soap-jakarta/README.md
- Size 2KB
- SHA256 229dfdca9460523b859384739add3999e355b2aef0a9ca80f206fd41fd056dee
- MD5 6c6d4f876f7126d2255474abe14f95fa
- SHA1 c4ceaddbb6488189a0d01eb615da496292a480a2
- SHA512 a906707aedd2686b41567764d6cb767e0e1018fdfb1f30ddd8f569e5209d2c3cb49915878fdcdac4ef2fc601e7533ee765818f2a91fc681a633e85feecd4db47
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral21 behavioral22
- Target
  OpenFeign-feign-5a43a23/soap/README.md
- Size 2KB
- SHA256 229dfdca9460523b859384739add3999e355b2aef0a9ca80f206fd41fd056dee
- MD5 6c6d4f876f7126d2255474abe14f95fa
- SHA1 c4ceaddbb6488189a0d01eb615da496292a480a2
- SHA512 a906707aedd2686b41567764d6cb767e0e1018fdfb1f30ddd8f569e5209d2c3cb49915878fdcdac4ef2fc601e7533ee765818f2a91fc681a633e85feecd4db47
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral23 behavioral24

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24