pylangghost | d3500266325555c9e777a4c585afc05dfd73b4cbe9dba741c5876593b78059fd | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
d3500266325555c9e777a4c585afc05dfd73b4cbe9dba741c5876593b78059fd.bin
Size 27.8MB
Sample251104-s792aavmck
SHA256 d3500266325555c9e777a4c585afc05dfd73b4cbe9dba741c5876593b78059fd
MD5 09b93b77c9f7c28151aca977d95eaa13
SHA1 be20cf6b1ebe922a8076245112307e86e615523d
SHA512 13a2654cc512b4463d678f36e163418fa2c7f17de3762e5f123faf169742b448d14474224cd5cd71cc00edab531ce9e23f018cb429347361006013a698b6b21a
SSDEEP 786432:RX+h15AdymiMFc2JkOEoyOjLeaTcmvJU0PAfEDZ3VioHqHe:oNcy9M1JxyqF9JLHYoie
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

pylangghost discovery

Malware Config

Targets

- Target
  DLLs/_asyncio.pyd
- Size 53KB
- SHA256 c878c6bb9e8879143500e95889da1381c394737769e1840d493cef8537ed4eb6
- MD5 4cb22b2bfdd2e7ec584ddc759c30271f
- SHA1 4294def2d0b8a8181f436764bd7a902a547a3b34
- SHA512 ae823779061b445d961a85997ea85f5f14c3113230470913486b0eb1a41a01de91c587c927a28fca8e88dad9b7e1b93c14ba511da2298d2c53fe4e4cb59c3ced
- SSDEEP 768:iIMTdISzBzfoklPfSGvR/X6ERkmqMDWfu9I/sngci/YzBGVp+g:DMpISVE+aGZrRx/SW9I/sngciwsVpD
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  DLLs/_bz2.pyd
- Size 71KB
- SHA256 befc81440bbc001bd7647aca42962ee0b45b08435ee9f7140bf570af636b7dd5
- MD5 055cfc5297933c338d8c04fd4e2462a2
- SHA1 bf8f97ee8136bfe3f93485e946f2069b7ce504e0
- SHA512 308ebb33c47b73ecd9c4e4e54ffd09aae5a96019559ef7b2a37a45bd89c42d0d5bdd21da1835fffd84a138b03662c3d68bd72725a22f1b0ddf0329438819ead7
- SSDEEP 1536:QVAWCyQNp7eoQO1Bt48bVDf5C1I/4VGmY3DasVplf:rWHW/1bVDf5C1I/4VFtWlf
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  DLLs/_contextvars.pyd
- Size 19KB
- SHA256 6629835406814cd78d006a6080efaf0e93e28b88b3fa2feb00b7ef9c975e4a61
- MD5 4a525f91513ece5fe180a5d1123d8337
- SHA1 4eb5a05c3c5f968edd206b13cc3f16ffcb1a801e
- SHA512 1575640ffb456327b78099b5ac8bd0ea20ce1f31128247eeb8890cb201fdf1c7b333d3532f01a2c5372ef8945499e3a7b2a6ac2fe1fcef27d26e08308a004646
- SSDEEP 384:yDIce5T8IQ47GlBuFI/AV6AjyRnYPLFzBX2VDFANkQQLDVW:ysce5To47euFI/A0A2RYzBGVp+9UDVW
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  DLLs/_ctypes.pyd
- Size 105KB
- SHA256 b016e7ce9744a0e8fea473f1982e5d2fc355a98682054f470f4189d5fc00b8bf
- MD5 06c45d47af92a68ea6da0cc861992034
- SHA1 0e8814b489e2c50e4481b69d532ca51e53274747
- SHA512 397ae19e69bdfb8bb4ec8197e5ac718d409930c6ff9e6cff979cef665ffe19aa197cca9b5a03ce7d30529d27a489b15e2a813bce1428e8dec8eb63f2148408d6
- SSDEEP 3072:kvSHF2GulZd/EVLY+oy/cIaO6wBI/VPjWt:USHF49hy/cIP6wdt
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  DLLs/_ctypes_test.pyd
- Size 29KB
- SHA256 4898f12cc3c532b2191748ac14e0fadf1d2a90605abb3714cb830ad606274213
- MD5 bc6716416a9d29899844ee0643e40f0e
- SHA1 f89b07ac54cfc92195ca5aafa5646766fc1eaf0c
- SHA512 1507cf06a668fd3b68db9e470de6ddb9047039c5b307b57ca3088017b48b65fd96745df3865904f7aec2a00e7f42eaa90cbed875581aaa0c34d9b1ec3079b819
- SSDEEP 768:G1EIjAr9ZESuucHlsFI/AkqsYzBGVp+yss:FH9aSUHlsFI/AkksVp/
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  DLLs/_decimal.pyd
- Size 234KB
- SHA256 749347c07f5db9d5cd318313ebf120e541e12502710c27486047123e6e5d5ac4
- MD5 942849b267a15e74c43bc298cf8efca3
- SHA1 c8fd58a3cde900e01dba9a8619876cc74004cd2d
- SHA512 fff51f27d49b264e8b1b91138e21420095959ed8377951b6774962a4db8ccd4a69c685a8ee70203c2507f7b72dc2cabb4897a522bf6a57f2ec9c9ebd2baa39f2
- SSDEEP 6144:yR6z61yWw75zxfDwZ7YoRJfQXia7Ydh4RZAoqT4F3XMWmgQqx+h:yR6z61yWw75zxfDwZ7YoRJf2iTYpCq4h
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  DLLs/_distutils_findvs.pyd
- Size 21KB
- SHA256 ca9d6530ee1210bb637eb52bc18806f7115bfe7c21695397dbc6d332870c4070
- MD5 610026d1110a098fd52925d38213b576
- SHA1 30ea26f8fcb2a20abfa994d7f183377f8ae710cf
- SHA512 697453535de12a36982688a3b1ee6a058673814aa6d89d5faabc8624274bd44b02a82d794c383a84d4726244153006e17264e21756d4d86b4c277314cd929a88
- SSDEEP 384:shMCRJcUUkTQn4l+Gl1NI/7mi9TnYPLFzBX2VDFANkp6:4LcUUk84QSNI/719TYzBGVp+x
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  DLLs/_elementtree.pyd
- Size 166KB
- SHA256 1e57d69385e2889ee3532f692fa8f1d2393c0fb4ef2e1d05745bf0ca4241318d
- MD5 af1ce090bcc447c42eeab4651dd2f2e0
- SHA1 4e7a931f16060658af976c0be21392fe184defaa
- SHA512 716f1a6a37f8e9c44a124f23ddc5f47d52ca2305a7e6a658323a25dfa84759e57ef4a73ce81f53fdb7f2e9f3765923aebf8ae53254fbc2fbe56c267008adc73c
- SSDEEP 3072:BR5ruvSJ0hgMIficT1Imt4XT1TY+6cXd4K+FI/AfsDbmWF:SgMIKcTmTY+/iK+WbnF
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  DLLs/_hashlib.pyd
- Size 31KB
- SHA256 c2b3dc92abd96485032d1287941e405d56df05fb5ba68199497d8594400163e5
- MD5 1280a084744ef726a673b757b9364335
- SHA1 203a83aee00f6dca7b5cf16f5d140ff5fb888bbe
- SHA512 637aa79bcfe2ac3f75319a4be3ee4e32769a52cf939a26564a73807b40e96328fd1e9b58e70abb0b4c204c77baeb61a5150f5ebc47a7262a9c520867f69f6075
- SSDEEP 768:AziwHlSK5aisuGTal9IkHz7574wWcaAkUZTJLYJC9I/sIsJ7qTYzBGVp+0:Az/lnc3uEWCuzKci6LYJC9I/sIY7qMsD
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  DLLs/_lzma.pyd
- Size 181KB
- SHA256 ab20e63d14259a7deca85a068796476c0efcc236a11d53b1816fc6f8956424a8
- MD5 d72665ea18965f103200ccc7ad072f85
- SHA1 2b89543cd8bd1aa20e0d3150a3c394b90be0d204
- SHA512 aad0bcbeabaa50b1fdba4cf70fe281f58b62a81b680cc16ef7f238263625fc7bed9ae9321a7bf7010fe7b5bb28708bdfaa0138c4f35a52be6aaba71d03aaa3dc
- SSDEEP 3072:hxAssBpUmJbnAmhDaHymrTEQNsPcMSrBPkG23pS17tvtjVhg24oypJ710mFNt7/H:7AemJbnAmhDaSmrTEuDypzFfIPYOjlKZ
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  DLLs/_msi.pyd
- Size 32KB
- SHA256 054439db12335cc5fe0ae05d8af96d3a2eb5cce45f8717e50d027c7e49007bf3
- MD5 1270d4861a96c0c9b1043a3b544ec5d3
- SHA1 cef3129628eeeb5a7eee115c1b980b870951acac
- SHA512 1e8f890daab7e193cf973a5f1d2fb34a7376baa7fec59cfa65d93b771897c1e49bbb4e3ccfe9546623731bd40aadd6be408a128ce6ce7b39ba83e7d0e3d8ad60
- SSDEEP 768:aEHvJPrgUkheTzYwnZgBDql24KaC8xoUAIpd+o7uMpB2Er1I/4GCHCYzBGVp+Vt:a2JcTwiBDql24KaCKB2Er1I/4GCHhsV2
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  DLLs/_multiprocessing.pyd
- Size 24KB
- SHA256 fffffd8b61e598e97f521c62e351601ce43abb9d498a840d1d41641a11c10491
- MD5 b49f8037a2dbf31fc4374fc34bdf9103
- SHA1 e5db7ce5f76c70defd2970caa2e5bb5648eb88e5
- SHA512 682ac42424b2e7d36411153cda89a9fdd8508d103029f52a3e13531a81809c2f02d99e58ef43bc49f5fd94ba9da0ed20be0c5f4d91b853b1303246293c3936f3
- SSDEEP 384:tofWITX7t02V+JNN7jEFvlT3Gl2US8ZNI/kBLEJnYPLFzBX2VDFANkvxM:tkvTx02V+Z7elbUxNI/ktEJYzBGVp+D
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  DLLs/_overlapped.pyd
- Size 34KB
- SHA256 4a86381be4c9ba42b279c1c7cdfb8aa8e1cb3c898f38b384ea4baa45551d071d
- MD5 e603dd180fd7e601e9ee2e4389efd140
- SHA1 aed40ea7d74e09f091fa01845962553f27b89294
- SHA512 8acfebf758c65be0e86cbd58d593fff0a2d8c607ecc0efd70b18f3333fd90bc721fe618133a1bd468cee2c5a44c7656cd263c2e80e3c99ece365f0fabfcbb9f0
- SSDEEP 768:C6Nr4dovkdMMGbvgcO+QiXrtIYT6pI/Jt6rKWYzBGVp+L:TmdovkuMC5NQ2rr6pI/Jt6WsVpU
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  DLLs/_queue.pyd
- Size 23KB
- SHA256 cf8d872886f9c85d5705d40e9d602db33b66aa1d2d43f0e70482ecf91cf8610a
- MD5 2188964211b458221a65043820799ceb
- SHA1 3155f1ade1556702eb7ffbc498b95d75f6b165c4
- SHA512 943b42ed14fbfd91019f0c2c29ee149ef79efcdd710e68516afaff8387f98f5fa33e881f2f388c1acf0093c457826af226ad863fcce2324667b581068d589838
- SSDEEP 384:OWTKXt3covDiQfH8a3MTLGlY6rs9BI/qUI5ZnYPLFzBX2VDFANkhLoh:OWuX9covD9fn3MvP6ruBI/qUILYzBGVQ
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  DLLs/_sqlite3.pyd
- Size 65KB
- SHA256 238210354447b6c75fb742851a566ad4fbe4269f93336e22b18e91749f631e89
- MD5 938a875ad7f42afc56384e2c170114d1
- SHA1 868645bcb661e070a7d21721e034808e702af22a
- SHA512 ad79478f801c531540698e0e32e254cef10525703f6e424ebcc13aa7c3faae3c4981c45e1675b1536311e356c08c26b652396054ebd732e63855cc923b75f518
- SSDEEP 1536:LMsYLxi3D89m2eV+X/l9ht0CseCxgGbNvy9I/sQU4dJ6P5NIWsVpRk:lYLxi3D82VArPCxgMvy9I/sQMvdWi
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  DLLs/_ssl.pyd
- Size 101KB
- SHA256 49559f96f659917c1c0e0d7ccb4fcf915bc1a00e51a5b25fe417262ef0f47774
- MD5 e577403078daf63ce6ddc07f195c45ce
- SHA1 b4f8c0a6466efe7f1919b6f9332ff8db55d6d6d1
- SHA512 d4015b716516f9f24b913f6bab9d9826b25efa57576b377aded57dde9dd83d95e451aa05378b909723af4b2a3bfaf5af6d4bd2a06858dce582f002e917bccbb2
- SSDEEP 3072:sEAQNWdWxS+iFxcqQToVZ3xLpvU1I/47fDEW4:sEAMtv+xcqQToDtpvUJ94
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32