1639d059322f2889372e36477a5e759eb7a56f3cc08778357cb2f3691a13a503

Sharing

Copy URL

Twitter E-mail

General

Target

nasm-2.16.03.zip
Size

1.9MB
Sample

240919-tcf1dsxame
MD5

01050593f2a61cdc998bccf05efccc34
SHA1

b1e3c40308a5d036bf6ad7aeb1f4f613ec156ce6
SHA256

1639d059322f2889372e36477a5e759eb7a56f3cc08778357cb2f3691a13a503
SHA512

43030f0f46d97def8503e9c794f7bd9b663105150be4de65c6b4f9d097dd86fa630c558da07a8af3044d172effc26eb6b2f81f1c2b40e43d52f4cb5e332f20cd
SSDEEP

49152:UVCLZj1TrKphbN+mEdFnr7uSEphcWSOD0vg:Usl5PKomEnr7uS9Ogvg

Score

3^/10

execution

Malware Config

Targets

- Target
  
  asm/pptok.pl
- Size
  
  10KB
- MD5
  
  0d5913500463fe17777b6266631b97bb
- SHA1
  
  d886f221143156b00387765974089228243c05cb
- SHA256
  
  cf85afe83052ac0bfa5f2d94a754b5469d7f2744690cd9a7464d6392e6ca6c07
- SHA512
  
  c64de4ff335dd831513dd0bffd7ef40da84f90f206e9e328e1359aeb34a9cdba3f3ff6caef1ef7e31f57421fc14a15d2fce796152d7b537df145faa0ec57bd84
- SSDEEP
  
  192:7L7rs+rsx/3b8ed1N4EIxlWWg0Vp+EKiwufKoZgnXLSWUnXoy7R:7Prs+rsxPVdc1Jg0WacXL/aXoy7R
Score

3^/10
behavioral1
- Target
  
  asm/tokhash.pl
- Size
  
  8KB
- MD5
  
  3f294ae96aec44a0965b6ca298137cbf
- SHA1
  
  2fdc1173e18d2e010890bac010b94a5d61ef8757
- SHA256
  
  bdc9d647db85473a69396593bfd44a14d6cfb96f0eb8b546dc36ed522ae80ba9
- SHA512
  
  a734cd03ed64d089821e29cfd072545d017bade6ea7677154321865c107508a53374dd2bcc9118edebfa9525e937595be73af4c1a5d7f774b7eb1fdf20d5f3e5
- SSDEEP
  
  192:7h7rs+rsx/3b8sgTEqxj88H4WAfWMpWVEEa3jm5Fr:7Frs+rsxP/gTEa88HPAeMgVEH3q7r
Score

3^/10
behavioral2
- Target
  
  autoconf/clean.sh
- Size
  
  118B
- MD5
  
  bb3793ad1ae2be347b30b30d5b3eb508
- SHA1
  
  4c84939a043238bddb9473da631932452914a005
- SHA256
  
  69cb5e5467ee9cf38121ecddadfd5faa4dad5e6937972e296adbe7407adf1622
- SHA512
  
  73d7aede459f4f6170513787e55a97799ee46a32d587dea64b1cbe0107e496b1cf070bdeeae4fdd3eeff70075072d5f7f04f6fd4a3f14b84f6d7361c3159ae0a
Score

3^/10
behavioral3
- Target
  
  autoconf/helpers/config.guess
- Size
  
  50KB
- MD5
  
  4afcc749f98f2efeeb1d5bc932c289a3
- SHA1
  
  510b811d2bf7574004bf8e9eeb403eb6f4d1ca6c
- SHA256
  
  fc0d8e812c987b64e4b2a65b8c673454b9356807944c1648b1fc02583ae86175
- SHA512
  
  8856a5bf09aff3176091fcee27e7aa5173cb4cbe5ccaa0a795bd836f3437d4dbd9ac67390e149844d5e85d1c1676f0d59f727e1b14d149c1d7bcdc0c247db05a
- SSDEEP
  
  1536:zBW/JEehgpY26KTmI2xomwYLFewhW5t11kznOgi4:zBW/JEeAY26KH2x8YLFeUQt11kznOgi4
Score

3^/10
behavioral4
- Target
  
  autoconf/helpers/config.sub
- Size
  
  36KB
- MD5
  
  3739d0c520b507b515fbd9e7297c589d
- SHA1
  
  1176af31b74836b6abfced3ea817f8897371cb1f
- SHA256
  
  026f82ad394cb76bb86188ab0e48b20e7b47451e0e48e83ed58c98e11afefdd9
- SHA512
  
  98f9c9fd0b5b2377189baceb16eff2edfdb14ed34d54766d33b3ddefeee5138f0d31b89db5cc9ce3bc2e3e941f16f6b4ebaaabeb42c5ac0af38fe93fd28f4faf
- SSDEEP
  
  768:uvzkLuA0PSvaWVxwp/KlI5oZHa5YMRCZkIa+Ed5F53HzK6:6Kvap/KeCZy5L3TL
Score

3^/10
behavioral5
- Target
  
  autoconf/helpers/install-sh
- Size
  
  15KB
- MD5
  
  87d5a8b09f5d6c303122476c6168c4e8
- SHA1
  
  ba4750469345fa1c228a87d94bc2dac5a54e4211
- SHA256
  
  ad5947ea134d92356e9cc128f2744311f5f47acf352c8334f579a678727a1e8f
- SHA512
  
  45593438657762d0f4182d16bc3f0cd231ac288d72506cec6bf047301f91e8c3e9addd353431e9521a1f09d4c708788d43b55ada8a481034cc42d20fa47399d9
- SSDEEP
  
  384:LOwbrRI5BMxDFjWgBDRtD3XD3ACVdxqHleoVkpnsQl5kgeWyrLQUP:LHt8MxDFjWgBD7bMCVdIHleoVkxsQl09
Score

1^/10
behavioral6
- Target
  
  autoconf/unconfig.pl
- Size
  
  734B
- MD5
  
  27eaf9e18b6ee83839dc6c3d1987b234
- SHA1
  
  79e523cfd742e4c35e1cf8cbdb30d2b8db304b50
- SHA256
  
  2ba1907ee2ff215039de20a6ab86a32da8c8419a651a62fdd76cc4db753b4427
- SHA512
  
  3bcf65367666a4605aaa51b4ecbb7c95237265eeac9fb57661b7313cd239fc9435a5375f19196b5f270dfcbcfc948bdfd47847493d078af75368e6a1edccce4f
Score

3^/10
behavioral7
- Target
  
  autogen.sh
- Size
  
  2KB
- MD5
  
  1e7a4015c04a6d7aabd847f038429ea0
- SHA1
  
  165034a863b506977f7e1d29655ff84dcd644923
- SHA256
  
  b1ead0627b16054c754282c471ea50ef18604465502df083fff41f3027627e28
- SHA512
  
  b32f061b46e9f42484ccf82b33f95c2d55ee4df13047a945a469afac085697b445949d895bae4dfe9873b8d14d94cb67b82b3f3c166293f9c960795a7d7994e0
Score

3^/10
behavioral8
- Target
  
  configure
- Size
  
  357KB
- MD5
  
  9c4c45dfd8ac9cf503b3b69f4786a28d
- SHA1
  
  409b8c2c12f40bbf4b1a3f5f3112555190979695
- SHA256
  
  6b3369ed33333231e5f81ac24d3bb3ed47f9996653464bd8ba7f9319534b52fe
- SHA512
  
  d115861b3d4e0ce2223f4717da346e7e89bb13dd98183388971750548fa9c9d94fb26daf3436acd30551e7c42c08523e3528657b4c914273384fb6f96c9bdbf6
- SSDEEP
  
  6144:Qfgg+bg7xXD+R8sBp+pLG5T6y5FDEmsFQ3UcT/xDfAIpN0LzKeTwHXsSsUVzdKOr:iwK6aOXkk
Score

1^/10
behavioral9
- Target
  
  doc/afmmetrics.ph
- Size
  
  3KB
- MD5
  
  00d6026b9a84a7640439172cea6d8b46
- SHA1
  
  5ba3116b6a45971cbde8ee44f4de252a42892fa4
- SHA256
  
  194cc978ddb77921393072c68e0d57c817079b64ffcb537b98f5f51b803d485d
- SHA512
  
  9f92883858a45df537d94a8fea8866ac2c7f15c8fede7bde02d206fb2e74238bb9f46d9406ceaf1c884f5b35f58fc1097939de15963c8f4721cbe227f5d40824
Score

3^/10
behavioral10
- Target
  
  doc/findfont.ph
- Size
  
  5KB
- MD5
  
  f1f212d096706ae9277952924634fb70
- SHA1
  
  98376103348ea4fc84596f3ad2f32e91b8701148
- SHA256
  
  6caa8dfae2f7ffef0efff9071fb0d37ea5f18311f7c454bec5b3407a654b5b54
- SHA512
  
  370ab5c9aa9c4f6938754770f6e20fce88e4c07f0e0056de1cd6cacde90640f59f94e143499e36c3832891075f33627a2d2ce9b7cd92b65fcf9576d986d32285
- SSDEEP
  
  96:7YC7rYJ+rYJYI/3b0yoKMNhUXUlorfqOWyANCsFeAKaGdcawLGZJ+sx+iiVvRdJg:7YC7rs+rsx/3b8KMNhUX8orfqDyANzFO
Score

3^/10
behavioral11
- Target
  
  doc/genps.pl
- Size
  
  39KB
- MD5
  
  62d2f76a1767619006d69c7c9926e9e3
- SHA1
  
  279b306eaf3f0815285c1f0259857eb55ecd056a
- SHA256
  
  ea4696d7087fd6a9d52d5caa762d77f8f4a2ff375216f522c1c91e81d8d0e921
- SHA512
  
  b516caf898678a623d62c3b0dba87280c711418d3ab7507f3e7c0f0d3a0f0fe3a5ae660d805dbf55c6b5b93eda5b5786dd4944f4711913adb14aa783a9fd803d
- SSDEEP
  
  768:JRWly6PTmjw7xeT543LttdzXjI1NralaQV91ItiPp:JRKj6NAX0EllB
Score

3^/10
behavioral12
- Target
  
  doc/inslist.pl
- Size
  
  3KB
- MD5
  
  8a8d422c97d5e4283fbcdb159302c327
- SHA1
  
  018cb45edd72f4fc1d8dffc3cf3a2a77ff29577f
- SHA256
  
  e0131c8c84a626219d037d98aa054fa7753773308b00cb8358f23b051d62513e
- SHA512
  
  876193bd9f5a3bcb3416e18ea8c873517ace79bfff2a9faa947b6fdf833e15ad316788ccc36323924f08c142bfb445755be42780edd45481e4855fb5effb30b1
Score

3^/10
behavioral13
- Target
  
  doc/internal.doc
- Size
  
  11KB
- MD5
  
  14945570fdbe0947ae82e377dcca536d
- SHA1
  
  8777dd8531937d22b236b5b6f05acb54f2c54c78
- SHA256
  
  6780d5d89a60b563610eefb615c6a0ce89642b34c49363837b70e5fba2208ae8
- SHA512
  
  3d349f26be35f9e4cbbb2feecd84151fc7cbc3d589369ca6d3d5071127cf65368fc79d3de16563e04a756f11407c93bd3b9ba2b214521296aed95d8241dc8ef8
- SSDEEP
  
  192:PQnx4zS5STgnjSR0t1kmyWYKS5weupGSbkld/vGarUG8A/BqHABXotrG2HUNqm+f:E4zS5SkeR0nkmyWkqB7bk33xrdnBqHAy
Score

1^/10
behavioral14
- Target
  
  doc/psfonts.ph
- Size
  
  2KB
- MD5
  
  70493a02f0e8df2a95701215b25223a1
- SHA1
  
  6a2d7d659b41cf0e74de55ee6ccb4ce2a925411b
- SHA256
  
  622b0f23b0b54e8d05674417fb6d94bc824f64de86695b99674d026029db006e
- SHA512
  
  2a341ea65f8e5a0e65b6d97bfc695387ee75d5ba43d0126423d347c0a01e8c6a279e314e0cceb6540ab404bd7316a7da966ff4deb24573b21cab07522441e689
Score

3^/10
behavioral15
- Target
  
  doc/pspdf.pl
- Size
  
  3KB
- MD5
  
  a4b26a92a8fd8a4678edc335a93a6067
- SHA1
  
  f8376087081a87bacc0e7126ef18c825acc3f58b
- SHA256
  
  7eb0c8c2fb952c838c1f7c2afd62dc33ee20ee06d80370a2b86202dafc5eb0d1
- SHA512
  
  d9d55b195dba99cdbae33fa3adbfc158eb95dc5e28e1b1ecfbe996dcc5737e7cad4891ed0ac5f21d7e5810bb1034944db907116d09054f41abc8ee26580d71a7
Score

3^/10
behavioral16
- Target
  
  doc/pswidth.ph
- Size
  
  557B
- MD5
  
  5e154a09a78e50f6cbdfa1388494d825
- SHA1
  
  68d64eb642758d5619974524e8e6456192482a5e
- SHA256
  
  3f67442932e10fe3063281dcc14fe21cb5b93b8292026dfdca1df74f1572a2e2
- SHA512
  
  71d0189449060149d66ac2dec980bd5f8388ed69f1cf336d901f9ce55ae545eee38a70c0c5aa4afde7e4fea43334c51e3374fcbbc3d2d18c68d04420fc76cf29
Score

3^/10
behavioral17
- Target
  
  doc/rdsrc.pl
- Size
  
  34KB
- MD5
  
  3a5a36bb4b1fd0e7ce7f4fe3d993eb1a
- SHA1
  
  d4795216035f9322d7145aa6950ddc4279571216
- SHA256
  
  d9796326dd04c907351037c9df5ba333f712de13202fc9166e239f782c0d6aa0
- SHA512
  
  f985ebbb0d42184518cf35f55d106620cd317e1f6ec0b6b4f9ea615c1b72fa6309bb806edb87ef0add69ce73091c2cf52db52a238cedd600aea23cd9a98bd4ad
- SSDEEP
  
  768:CRWPBWM63AZMFKNR5q8SzI7na7U+iTr71Q21FHsbh30fYZ96tuy:CRiWM63AZMYX5q8Szka7UNTO2vsVyYq
Score

3^/10
behavioral18
- Target
  
  doc/ttfmetrics.ph
- Size
  
  1KB
- MD5
  
  f5f386d371dba3af86a15e4f939bcca0
- SHA1
  
  56094441cb4808af18a576ad1d153db8d46da46a
- SHA256
  
  a425fd3725aaff6441821f4d301221295606ce9e7528d4835d5a497059c08c95
- SHA512
  
  0e014958ca2bc136c293b3a5f78eb7160a0baef0b4cfdbc3bf4946ab187062b7001d27d35c5f85b4b391c29a60a27d7fd237007855cf489d7fbd19f26977ba25
Score

3^/10
behavioral19
- Target
  
  misc/emacstbl.pl
- Size
  
  4KB
- MD5
  
  dbfb9912120ef5e8e41d421f734a62fa
- SHA1
  
  9fb922db66cbf41449ff045fed8a565278e5f34c
- SHA256
  
  cd23ff6bf2f6d9448339216917e8d68de60df2372537b98fec910bd6953e816f
- SHA512
  
  ed3c678a67bcb6aaec784de40922a911fdf2aceef393b87d32145e1bf5c3477c9d89d9bf24dfcc76061cd733c12759625a22205c43200e73a03b7346b4da308d
- SSDEEP
  
  96:FTdMDLv58OFHyYpV0PmOqW2LyOdQPSbqN85:FTdMDvM12K6bq+
Score

3^/10
behavioral20
- Target
  
  misc/fmtinsns.pl
- Size
  
  967B
- MD5
  
  e9c8ea15bc9e557f38d24e87545676e0
- SHA1
  
  6ae30030e5531aae14a8e8fe174d25ae4c5fd4d7
- SHA256
  
  03c6e47f5d849159373c3a70157622f1e2976a46fa58c4d231c2bf15bc2c2304
- SHA512
  
  a48d9b48d6442c30dc718a556eea9ff13822b9ddf98426110e2d8adc5171522cf846a2a4ec5d1810f8bfb7d9c0fa6caee83edb5a2188e2bf175e9115e1748c98
Score

3^/10
behavioral21
- Target
  
  misc/genfma.pl
- Size
  
  1KB
- MD5
  
  35cdeb339befd4c131d3e879731a4d8c
- SHA1
  
  e8432a8356b7a169a96f6536a460dbd856fbea11
- SHA256
  
  45526bcde5a5ffed6091b768a59f05e338d585bcffad038062335aed434397b8
- SHA512
  
  d1c79aa5bf3a792f189a90582bde9027c17768b5cadcc6e0c4ecd8ff8b256bffc4cf4d7adea0c8228ef4f959be33dcaaecf1f7e1dba2ec8cbc3ad51a02c16ba7
Score

3^/10
behavioral22
- Target
  
  misc/pmw.bat
- Size
  
  317B
- MD5
  
  b5c7c7aa53ec3ec26ba62d001d5866db
- SHA1
  
  24a848e37d152b93eb6006ffacc7b77033807f85
- SHA256
  
  7e07ab1f993a454003e75d38065db4d24b3665004f7277834a7a28cf21a5e0d0
- SHA512
  
  d262d9e43d515c9b0afab1876c1a0122e19ed61b780d23333921c15ecca70babbb9daec7fbd44377a7d1865bdffc1815232ad48b0300690e3c5c020a70af1e32
Score

1^/10
behavioral23
- Target
  
  nasmlib/perfhash.pl
- Size
  
  10KB
- MD5
  
  8c07c960c324a74de72078aab62d1c1a
- SHA1
  
  eb7d276a51ed19b2b3198ba0c68bf1d29012ce72
- SHA256
  
  9379f0fd8f68020746cf79e4ae854017801dd7f2a072d5ad2060609350dfba2c
- SHA512
  
  bddfec53909453b475c4eb335606d95b17e589d250bab5d80f2abeb58434fa22685c02e11fd1979e5b098e7bc3257aff5caf38bc003be88262ea75dabbe54fa0
- SSDEEP
  
  192:7YC7rs+rsx/3b8PAQSNGmyA6noocFG8OdpSd99XmeU0+cA/xCJel:7Y4rs+rsxPIAQRooc5b9lXA/x8el
Score

3^/10
behavioral24
- Target
  
  nsis/NASMMultiUser.nsh
- Size
  
  13KB
- MD5
  
  3fde7400c1ade319bb8975263d9de3df
- SHA1
  
  34df1795a6f1c8cd6c87e09ae97580c44381a853
- SHA256
  
  1503a2564d5d4bcfe8ced7c11cad3b7356dba9376808a75f65be80d4d882d525
- SHA512
  
  bc5e3abeef827dc4c0268abfb10e34edc72cb285ec9fe275e041c42e5c1f6a3d91346819e878cf6ea480e31504bdf6d82e9a12549fddec2c818c57b1f38b4ace
- SSDEEP
  
  384:Oalf/UMv/lUHtWGt9ewe9AW9weeAuMOLafpDRNeZpGtbq:+/H
Score

3^/10

execution
behavioral25
- Target
  
  nsis/getpearch.pl
- Size
  
  1KB
- MD5
  
  13aae6ab46d47b30da7f811fea1157c5
- SHA1
  
  5e554ccf1c49ce50cf77cf64ca14948fc8c8b4ff
- SHA256
  
  41a71c3ad62763880288e7d2fcaabaae6a1acfecacc6c5104a78d359239dc353
- SHA512
  
  25fdb3ece09e4ed1f871947baf0a824ecf33592690440578ed3a0c1b1c63ffb4042f5a8b10e52ee512b0aedb5ac5366e8f6de58c1602cacaa55c2d0e27aa1cf1
Score

3^/10
behavioral26
- Target
  
  perllib/gensv.pl
- Size
  
  656B
- MD5
  
  3d7dbe280b52e2cd84b959c6937fba9b
- SHA1
  
  86d1495ced10f54ac906a51a2fa43c2448eeae2c
- SHA256
  
  bc9499d6d8e21aaca9eec90602d3d407a1b7d1df0ebf3613de43eba27f0d0194
- SHA512
  
  3d7dafc33ff75770aa3891a079a56713609532abee1518f6961629172d524364fb85eef0988ccc5c2079507b2de1aac1fc373706f0ba8a4224ff8c6f706d5f9f
Score

3^/10
behavioral27
- Target
  
  test/bisect.sh
- Size
  
  473B
- MD5
  
  0bd6dbdaf2d2bba90213a2b5b7515246
- SHA1
  
  bf1a2b8e880a2070388d7b71bcb7f728532ec396
- SHA256
  
  5287d7e86dc32c108a6168e883fe3c4b3fbf433a5c9744fcd436fffead66d659
- SHA512
  
  e8971f9cef539f0ca41f7a494b41ffdc5cd1810966fdb02cffec7324f2fae3147d8c7ad50b62de6a856c425bd8dcebea4220c696838491d62980fb957c1f2ffe
Score

3^/10
behavioral28
- Target
  
  test/iftoken.pl
- Size
  
  785B
- MD5
  
  a862699252b2c30729fcb7ded4743195
- SHA1
  
  cfb9704f4270226b5bcadbb75290113afa71c196
- SHA256
  
  387d2e8a73611b745b6234d0d84927240a370010c58e12a4a7858f6c032391d9
- SHA512
  
  f0e93f21072931281716e3791a4f7eece66b2218aa2d5a2a36fb91eded856db9d392ad566ef3df9800d11d66d6bed1fd95ffa015de48079f8ed9aa24453a0e14
Score

3^/10
behavioral29
- Target
  
  test/new
- Size
  
  224B
- MD5
  
  92acb8cb7dcc9c12ca556730e79a1255
- SHA1
  
  17c791f75056a1706b3cbc671f63be14613ab8ff
- SHA256
  
  9f97766107d457a92eadf17414c5ae464d5967ce7a778eef5f1377169a9c16d4
- SHA512
  
  b9b8590f2306bcd2e4283cd0757bc9d923b7e8dcc79f6097333d94b0c75ad9bb8fbadeadc031db717ded4b3e76b1e91d4aa8a6991a8baa1b03b1cf447491e53b
Score

1^/10
behavioral30
- Target
  
  test/perf/label.pl
- Size
  
  331B
- MD5
  
  eed12e097e517a8850873ff9396a97cb
- SHA1
  
  fadf98a552cbb4b19b38f40e9435d4dc1d71f07a
- SHA256
  
  5f2e7acb8af355ee22d24d49c3debc67d7404c08682546386bc21c9dc1209429
- SHA512
  
  6ef2055309fcedf4864e72b3165cf43c60b956a0e42dadf42c00cab1c4704db86e85bf01ecd1e05dd0e5e20c7c512397e02d42fff0e4d3939b2d411821212914
Score

3^/10
behavioral31
- Target
  
  test/riprel.pl
- Size
  
  764B
- MD5
  
  56a14f53abe8cb361327087db1efbb9f
- SHA1
  
  cc791c70fa311261e422833d6af9170d7c91b996
- SHA256
  
  9e513d1aa9ff46f2417965e10dda4ec633dfc673973654e419079a17a5adf4b5
- SHA512
  
  921bb10cc1309fdb555f96a093cf4ea8f7c3bb3ea339dffc873793bc64f173c290a56e38e365a912f857b0e8a08e742cb693cfcc6121d870366cb99633dca713
Score

3^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32