Overview

overview

6

Static

static

3

BypassApp.zip

windows11-21h2-x64

1

BypassApp/...s.json

windows11-21h2-x64

3

BypassApp/...pp.exe

windows11-21h2-x64

1

BypassApp/...config

windows11-21h2-x64

3

BypassApp/...pp.exe

windows11-21h2-x64

6

BypassApp/...pp.pdb

windows11-21h2-x64

3

BypassApp/...g.json

windows11-21h2-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    BypassApp.zip

  • Size

    90KB

  • Sample

    241011-3emqdszdqg

  • MD5

    4aba9c6aa4131b3cad3d9ab744c8d0e2

  • SHA1

    5aacdc1090c742c8a894ae9007510b8e530d7082

  • SHA256

    c5de8ee605d0a111806129353e280bc2fc1c995cecedf6c3ea21b3640a4cfad8

  • SHA512

    50497955bfe1af4864fbc8e248d2750051462038e252b17081b7b5c995e3d836cb2209cc0a6e10f120848a5cb1ec44e4072ee65bcde558e936a5a1ff0cc4cbcd

  • SSDEEP

    1536:O6i3Irculj2xJbKOZOJiwcHcTLamEp0usR8M2pD0cSSTX0/Z9NcmJY/qqH2XGytA:ZiYrc22x1pOJiRcLamC0hrmD0JhjNcmq

Score
6/10

Malware Config

Targets

    • Target

      BypassApp.zip

    • Size

      90KB

    • MD5

      4aba9c6aa4131b3cad3d9ab744c8d0e2

    • SHA1

      5aacdc1090c742c8a894ae9007510b8e530d7082

    • SHA256

      c5de8ee605d0a111806129353e280bc2fc1c995cecedf6c3ea21b3640a4cfad8

    • SHA512

      50497955bfe1af4864fbc8e248d2750051462038e252b17081b7b5c995e3d836cb2209cc0a6e10f120848a5cb1ec44e4072ee65bcde558e936a5a1ff0cc4cbcd

    • SSDEEP

      1536:O6i3Irculj2xJbKOZOJiwcHcTLamEp0usR8M2pD0cSSTX0/Z9NcmJY/qqH2XGytA:ZiYrc22x1pOJiRcLamC0hrmD0JhjNcmq

    Score
    1/10
    behavioral1

    • Target

      BypassApp/BypassApp.deps.json

    • Size

      419B

    • MD5

      e61d63e7ea5367641fd79accf59ed1f6

    • SHA1

      715a585630c8826c0f94728393893e579064ee10

    • SHA256

      2cc1bc535246641a66895ff067904121c3f46afce519f0bb7f5e254ab0ad8e3e

    • SHA512

      650dc206d38d7fe085ae27b4e83f3bb82e3b30932bf25e33d26436cbf91bc2ea9fd46424e4fe30a175ab8e6b47db7916af672162d164b4e6e86fcb57362be0f4

    Score
    3/10
    behavioral2

    • Target

      BypassApp/BypassApp.dll

    • Size

      54KB

    • MD5

      b8c11ee1430dc88fffbadc10e5784a09

    • SHA1

      0bc8baa703f283cb08c36c3f3ff5992ffbd21607

    • SHA256

      dd8d189f8f0786e1f0a4db3d234394553a915f8aade334f341bec34373f74cea

    • SHA512

      31811a7f4d329d2031c5ab6fe9152ca5962fe1c18e21f5f1e066bf7b36a4527d762807bb92439d11a17302b05416f8f359aabee24d3b915a2f898b460460b9f9

    • SSDEEP

      384:XwIL+xkT+vB3ewldQ0DF2I1nHmFOooooooooooboooooooooLz0C3SThd1nHmFr5:XwIL+xkTpanfe0qwPyeyD06

    Score
    1/10
    behavioral3

    • Target

      BypassApp/BypassApp.dll.config

    • Size

      77B

    • MD5

      feb8a12f54cdbca11133449147e40b28

    • SHA1

      c3b58d82ee4cc42bcbe030202120718309a10f35

    • SHA256

      b115cf3bc35c222b952386a332bb3b827c6dcb48fa0a12bb3a8ac4e9b334c5f4

    • SHA512

      12f8ca510aad04a5674e6edfa043e6b2410e913ad9afe010640f386c8e1660687808fa8ad98f0fed97333c5dc043c59e68ffacb69b21aca80d415a10264f0bc6

    Score
    3/10
    behavioral4

    • Target

      BypassApp/BypassApp.exe

    • Size

      156KB

    • MD5

      4e6dc0b8f2c06d79413bf9b0bc91806d

    • SHA1

      f1e43a3dc6321529f0e1a4f7a345259327c7c4ce

    • SHA256

      e45be516193d616ee3ff1d4ba5cd0f74e842aefc9252365ecc0bc8b6df18e8e9

    • SHA512

      160b00e870a47a500ec1a3793a7e482b41d6411005c6a31e68400171766c3c5de7458577dd7724100b530143a41f8758bbff767d38948b681d382cb7dc50bf76

    • SSDEEP

      3072:5hK4Uay3XrQ8habqgp9pC9Z6p5uf3CzA0xuZ04ntfxyhBu52:5hK4XycqgpfCup5sKxuZ04ahA5

    Score
    6/10

    • Legitimate hosting services abused for malware hosting/C2

    behavioral5

    • Target

      BypassApp/BypassApp.pdb

    • Size

      13KB

    • MD5

      5993258e9f8208a02c2af9a90c5932c1

    • SHA1

      defd14175020dbb16bc05d6a70d452a88d9e0b52

    • SHA256

      e921e6c82c2da6ece4eef382f5818dae4f007751d697cda744b2584933d69c89

    • SHA512

      88a8cfd185143e82fbf360797859f080b559d73324f433929908b6e89338315a431945cc1f25443dc39cd5800c1ad126c321759f2de214994102833980954c95

    • SSDEEP

      384:ybsq1cV/Nac4JxApaIxZvLbY9jGQ0Nbd7R3osWdXgZcBCNoH7fpxnxvvQOTWrkhC:nq1cx6p30rFW2YTWrkvQ

    Score
    3/10
    behavioral6

    • Target

      BypassApp/BypassApp.runtimeconfig.json

    • Size

      458B

    • MD5

      07b9a30265ca4e69c7016a1b6e3ffc27

    • SHA1

      3a4af82a2695b1423aedd8b60a5c86793c011b02

    • SHA256

      c71152bf25e40d647b2440c5b39be157a3d356106be9d5b678ab97bb87b4e782

    • SHA512

      efd582f8edcdba5ef48d02eee5f73d83ff35071af99b49e08e0213928568d728d0856e3b903bfcccb9237f786846cf94da83139f99e9bee86287aff2071c3f1c

    Score
    3/10
    behavioral7

MITRE ATT&CK Enterprise v15

Tasks