General

  • Target
    HydraDragonAntivirus-main.zip
  • Size 161.0MB
  • Sample241227-ma6ppstrgk
  • SHA256 ad69e83f7ff54cd47b06f55e2ec55612f64ca77f5e8b6a77ce50fb588ed66eb7
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    http://lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion

  • exe.dropper

    https://bigblog.at

  • exe.dropper

    http://lockbitsup4yezcd5enk5unncx3zcy7kw6wllyqmiyhvanjj352jayid.onion

  • exe.dropper

    http://lockbitsap2oaqhcun3syvbqt6n5nzt7fqosc6jdlmsfleu3ka4k2did.onion

Targets

    • Target
      HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/ICSharpCode.Decompiler.dll
    • Size 2.4MB
    • SHA256 d174072a16aa758a39d160f70ce924103898fae2b8506b48f70d6909e25a1fd0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/ICSharpCode.ILSpyX.dll
    • Size 121KB
    • SHA256 706f481413ac88aad764baac492b1f3e5165ceb099c2db1b1e2b1b0a8c56abdb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/K4os.Compression.LZ4.dll
    • Size 65KB
    • SHA256 9718945aa73e4fc68bf48eb1dd4704bbaacd6e1c22670db56dec161b18226897
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/McMaster.Extensions.CommandLineUtils.dll
    • Size 148KB
    • SHA256 8e45ba6868ad2c63b53a3acff7ae53e316bf1391cffd71737c10262fbda6da71
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/McMaster.Extensions.Hosting.CommandLine.dll
    • Size 20KB
    • SHA256 41c50a48ed2937455b16115dd9f33661853b40fecfc1b814945263040b04df9b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft.Extensions.Configuration.Abstractions.dll
    • Size 24KB
    • SHA256 e4eb5eb7e28a5548cd904fe1a9c3569adef91f52b654db8a3c56a0a5177a09eb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft.Extensions.Configuration.Binder.dll
    • Size 33KB
    • SHA256 c0d2a11b73afc7c8eac5bb1ccf60002e5b132df23a18bd9dc8385eeb7992b283
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft.Extensions.Configuration.CommandLine.dll
    • Size 22KB
    • SHA256 db2a0fbcbd1d424413dc9b5cb35c9ec70d1ede862814f2f9527bf1224efde508
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft.Extensions.Configuration.EnvironmentVariables.dll
    • Size 18KB
    • SHA256 94fb00fe869f78b572e8564d2700b143f392a5ab7c110e8c81981d5edbf632f7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft.Extensions.Configuration.FileExtensions.dll
    • Size 25KB
    • SHA256 9f67d13f6ff5b463736821793d4e218134a51caf3ce8ebe205fd9801db3735d1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft.Extensions.Configuration.Json.dll
    • Size 25KB
    • SHA256 476f3fcb02d6c48705c4ab43223d08c42f9b5e2e2ead7e811de2cbdb847ebd34
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft.Extensions.Configuration.UserSecrets.dll
    • Size 24KB
    • SHA256 cdb02893f9a9e822f8646836ec9e25c3c538a56872225f98a6b495103938eba8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft.Extensions.Configuration.dll
    • Size 35KB
    • SHA256 73cc9885face04b1273818252d3bbda5e5d26c90f0169b93e144225d2bf6f0e8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft.Extensions.DependencyInjection.Abstractions.dll
    • Size 42KB
    • SHA256 9ccd830351aa28bc683d4f8d1cefd9e724161f972d25bfb64eee5bf55c48c5e3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft.Extensions.DependencyInjection.dll
    • Size 79KB
    • SHA256 2aa8182b5356a8cc5c35fc3641a87e814857d8d9be399ac78f260343754d09e0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft.Extensions.FileProviders.Abstractions.dll
    • Size 20KB
    • SHA256 ecfcef11c42fa4ad5cf2d4d7f553c8f0017e5eb7a4a9b032b4d0505c98ef4ef4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Matrix

Tasks