92212adf7fc27d9a3b396d0763e9090cf335825f2afad4740a0ee266229fc1ce | Triage

Sharing

General

Target

f47f2e117c83a1e033bab856318f0c7aa8600bb3cbafd733a472b5ce6a961031.zip
Size

256KB
Sample

250214-bv2eyaypgy
MD5

3df58bd05e34fad0e3526eb5c0c1d239
SHA1

29a3094938cf34ef34e354ba17b02e58e3164dd3
SHA256

92212adf7fc27d9a3b396d0763e9090cf335825f2afad4740a0ee266229fc1ce
SHA512

8a896d308ad7f9cdb11ea9741827f6449197914cd855cec372cdb5f237ab05cb3770bfef91c179e992d23444b8c5d2e6a729feec3a023e685d9d05ef2aad3f94
SSDEEP

6144:IpA//a+ojsrEeCWM8dnbYDFCTAYbnBYZ1GyMo8wd:IpA//aPe9fFe9DPBMO

Score

8^/10

discovery

Malware Config

Targets

- Target
  
  TOS.txt
- Size
  
  315B
- MD5
  
  ee73ef17f356d7fb4cb11033ab49f536
- SHA1
  
  fa1d760f2a04ef72a387c7dbfe89fc825ba5f1e7
- SHA256
  
  5da1c2969fc9b9b37b2b2d6f302da928382a2f6dde8cd34a00f213a3a09a5d16
- SHA512
  
  062581224b1e6be97685dd2236b57900043e49eb49eba3ca5029db1cc62f7269e9ab1579ceea141cddf1190b0fe18eac23aad3cafc7f4b0c19335592b75682b9
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral1 behavioral2
- Target
  
  config.ini
- Size
  
  450B
- MD5
  
  cd4658d939e93cc536aeb1a598deb008
- SHA1
  
  db7a41bc067f24b515a6668fcae1d7bb236f2d90
- SHA256
  
  0147213f6a301fcb3741fb077deea298e14e0ce73f3d1075af80f8df670df074
- SHA512
  
  58d77a72c8d09270812f8ec3007b5b81277ae98bc84cbbf42bf9fe7f14f2b218874853e24add4995c84b245e3ad94627b71c25e6fc1443a1e142afa011784255
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral3 behavioral4
- Target
  
  conflicts.txt
- Size
  
  28B
- MD5
  
  dbd65236078ba9e2be9b41dcabd9796d
- SHA1
  
  09c4d0b365be5db17e2c4b65b896c36b85b6fd2d
- SHA256
  
  468c02df6809df68d8c00045777bf0d46d5bbe55d2288c64dbdf7e979ec8c2e9
- SHA512
  
  6918c4488ff4edc4e5dee6cc8e1b3fff6f236e770c8b6749f9084ce21d9ec983a38b2133a32a9b5376bcfc580ea12390cd98ac956b3a7bbf367afa331e2c5042
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral5 behavioral6
- Target
  
  data/afk_data.json
- Size
  
  2B
- MD5
  
  99914b932bd37a50b983c5e7c90ae93b
- SHA1
  
  bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA256
  
  44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- SHA512
  
  27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral7 behavioral8
- Target
  
  data/auto_messages.json
- Size
  
  2B
- MD5
  
  99914b932bd37a50b983c5e7c90ae93b
- SHA1
  
  bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA256
  
  44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- SHA512
  
  27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral10 behavioral9
- Target
  
  data/auto_responses.json
- Size
  
  2B
- MD5
  
  99914b932bd37a50b983c5e7c90ae93b
- SHA1
  
  bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA256
  
  44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- SHA512
  
  27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral11 behavioral12
- Target
  
  data/config.json
- Size
  
  57B
- MD5
  
  83c20904fca500f9f004d33b02a6ac4b
- SHA1
  
  fbf1fbbcaa8d773b2367680eb3c191cf37ed8b77
- SHA256
  
  d2f82c5cd2bafda621298fbe56f03ffbc34f69d202061b92f6486b5ac7b8762e
- SHA512
  
  d3c5a22132a5167415711ca8c25b75adb7956c82f6ce6ad9efb7611f76b4e56cc5bfb90de734daaa3c55f5816f92c84bf6b10c394aa7fe44d1dda0684e335c8e
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral13 behavioral14
- Target
  
  data/restart.py
- Size
  
  248B
- MD5
  
  09ad75864b174963962f169ea7f7cf49
- SHA1
  
  41f108483efe464dd642a86ff3bdf4b3e4899c71
- SHA256
  
  885c7a1a1bdcdd55bc1efa1b09e51819d52c6b79c40bc6239538e632e3efdad8
- SHA512
  
  a1144b5f542da2878ec069b7181b50bc3d10d6a693ee506e542184bd67ca3d6386fc4898e1aa0c46d3ae30fe80cf0d071635ea87856473eeae4740a912059c09
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral15 behavioral16
- Target
  
  data/tokens.json
- Size
  
  2B
- MD5
  
  99914b932bd37a50b983c5e7c90ae93b
- SHA1
  
  bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA256
  
  44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- SHA512
  
  27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral17 behavioral18
- Target
  
  install.bat
- Size
  
  164B
- MD5
  
  5e0ea4d3565753fa245b8f98c686c961
- SHA1
  
  3a2ed260628f3b7ae22e5b9d3b26fa02eeb48f0b
- SHA256
  
  468ccc04e9db7d3b6151de4cc2526f9eee72e6f6db075bf38ce2d23a114c7a01
- SHA512
  
  0e6a832d2a079abfcef1d485098aa64a0409732463cefc9852cd00353d248a0e1cff9170555d83c6733f70b83cdc66ab04d30ffdfc8cf3ab98317e719fd44f7c
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral19 behavioral20
- Target
  
  main.py
- Size
  
  333KB
- MD5
  
  cc6b20a2e6a297acbe7a51ab871ba622
- SHA1
  
  2ed58b8309b78ce515429d5d2552cb3807716d00
- SHA256
  
  c7ebf56f2c97515835b9e537fcd03805d313f251e2f864743ac5fa5e0a2014c7
- SHA512
  
  5edb2ca6f730d5cbc6e55d1be53cadb4934b9107d58556875d25e6051c3b19869fee10c6e9f5bcbe004269f4168fe755753c28c788386b4f6df7e46135cbb1d8
- SSDEEP
  
  6144:xenhAlySntSY9REf+GYRl28lZ2fiE1lCET/IZIAUWJGACK/BI:xeh+tSYfueRl28lQaE7CEsZ9bCAI
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral21 behavioral22
- Target
  
  readme.txt
- Size
  
  1KB
- MD5
  
  f89bddf28c49ecf909ae5b9aee5750e9
- SHA1
  
  4b0284294dac4892e63fe69212c74d42ffcbe324
- SHA256
  
  8e0e3f39cf6c99281f389e0f2d36d6001cc3ab4ee32be3684ca6027a0786fcc8
- SHA512
  
  ab91cd3e4f47af21b547a4298c1e442844edb4ffc1488634bf045c1d3c9a3dee6bb2160a21e5112a6ccc4203714bcbe508a968db6ecdb2f57e4229493d33b629
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral23 behavioral24
- Target
  
  requirements.txt
- Size
  
  505B
- MD5
  
  75576272c5f91fa7e19bf1691e1a0596
- SHA1
  
  cc7207b4653677cdb916b106b1529d17b1b83328
- SHA256
  
  ae2137cb1fcd65459773940953edd9ba85e9ba1a91dda814f27efd47f31e822e
- SHA512
  
  95a69e659540c94a6714cc31b63761aa2a53c4a4e2febb5347084c36877d2c83927ad2f68b8776a6557ddd3c4d0f35b920beaea5f0a72798502f40d836588670
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral25 behavioral26
- Target
  
  start.bat
- Size
  
  14B
- MD5
  
  92a6f2af2e2bf7d6e64b7821f5400d1c
- SHA1
  
  ee3e35bf31da9e6616c1c6a663fd19b4d745a279
- SHA256
  
  89b15dd343075c7271ec08f848803709a915526e81831af0a9df53577b5155b5
- SHA512
  
  57ebb186b961d2e73bfe554f247b53558cd358bba5716578c355a85caf783087495ca15e981bed2c049e4485bb3d5edf413d90b0e16f68ba95bbdc7f26f5b29f
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral27 behavioral28

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28