a27015bc4b3b5f23eb9eb75a482dcb042233872ac87a0ac8639da29dfcb43c87

Sharing

Copy URL Twitter E-mail

General

Target
a27015bc4b3b5f23eb9eb75a482dcb042233872ac87a0ac8639da29dfcb43c87
Size 9.7MB
Sample260415-e546csh17z
SHA256 a27015bc4b3b5f23eb9eb75a482dcb042233872ac87a0ac8639da29dfcb43c87
MD5 bf5a3f91c7cd8980d94640a9f3406523
SHA1 4bc1460542485507e7c4cfa0433b4758db84df41
SHA512 483b70dd785b82a80ef1c33baf07de56bc6a569edcfd662d0d6881535857d7af945b24d21c52e59b78e07a6b60f7188962f7f8f80af25742a3047e4967575c09
SSDEEP 196608:VePC3qpq4QNbOTMbwlgvlrzKvY0OAFTNA515JKRVrQr3EZhkPxO:4qxOMGwKgBmJk15JKVrQr3EZaZO
TLSH
T119A6334BD248DC7BD42BC7B6E88AB420FAB604D571F6EC5DE955DAA00881F4D43C278B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  ARK Server Manager.exe
- Size 2.0MB
- SHA256 b751e1c7224638535d487fcb1777c9ab19d0353d598af4b0848f84ee185941bd
- MD5 7b8e07796e0393f1c39d138fd0c848c5
- SHA1 92bad736e15f64f63e43c6d44cbe4a60b93d2bc9
- SHA512 511f35bb793233eaa2fbdd147ba68afaf9c537a751f1659b49ca082da8d63d999643bc8f877456bbc1eb84fb3d61b20aab1491685db007b6811a4cf512b1ab1e
- SSDEEP 49152:tfPAUR7B2t7nYjVgrw5899JaBummXRtMWuR5jC1IhkW7h:BjczYhv5MCm8Wwwuh
- TLSH
  T14595238AEC640176D16779F0545260DCEEE00CE22A29C87A13F67784787627BEE761CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  ARKServerManager.Common.dll
- Size 43KB
- SHA256 c198d3c47eac660c249d6f162acae725733bc8d7c2d809ffe150932d130e302d
- MD5 99e747b49d78b171198f772d81da97e1
- SHA1 db3600714c9286b1e3e33d6fe0d6615e6440b406
- SHA512 0b0d039f96e9ddb6810a502047bd22a31e6e634f2e2aca3c3b891b6cbe49ec3c9c3279fa98baebfc3819bf67c3ec8e9b7bacd5a9b015eb25f91bb6fd5c363825
- SSDEEP 384:iAvgaw+tQe3l8kTTs2vBkeYyJhP1YaBu4guV5E6mJVz/OTNgkJluirwYQ:iQg7yVSeQAIyJ5NWmQirwL
- TLSH
  T1D313774A92DA0DA5F4B70B7A6A7309700773BBA4293DD46DA5DCFC0D0FE35009960BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  ArkData.dll
- Size 33KB
- SHA256 5bdbadf417654c3552bb910dffdb64ce011b785c279b4576cf05282c07a03bf6
- MD5 3a9da36e946bf73c5c1a8bf24d76e962
- SHA1 451b4cd0b29c480fd3dd04c7a8523006369f823a
- SHA512 774f48016f5086c6799d6c06ac15c234319bb3834577e1a342b3b93254ec11db980244115a4bc67f1559e70e078e92b094cdc554c8cecc7afc2215eed2e77a5b
- SSDEEP 768:NlIEp5VqTT6j44tYuhXDHikjLebfXCh4v2Je9o1Hc5frWs:/e0rtYu5ekvebfXCK62oNc5frWs
- TLSH
  T179F2E708A7FDC236D56D07BCF4A08231127261263703FB599F98B4DE2E63358A954BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Discord.Net.Commands.dll
- Size 129KB
- SHA256 55e34240b43546f54404496fef1613778b9cb4bc078551a96e6ea413ef868e60
- MD5 24ba9d5efa9921a7ed6da07637fca69c
- SHA1 63e87f7925cc1c39108f35ea5a45f61eac25eeb4
- SHA512 bd086a563642778000d83df9966ce08a6edc8aec4e36175327a0b7fcefe79ee3b45de5b321c20b91e0fbde56de9effba8b2e190ff64ea16082bdc1d0c1b9f1f6
- SSDEEP 1536:aViLPgMOrqu1OTsmNfQKNlatAXo9ANb7Tqqx1L6oKo7dW4XvV+i9dbxSf6dQJv99:HLUJ8h/auHpooHdhIigZYp69LJhg6
- TLSH
  T1E0D33B34A3BC8B22C6AF7BB9B57042350BF7A606F0AAF7494D4CF8ED1A467405911367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Discord.Net.Core.dll
- Size 643KB
- SHA256 68cf9f25959b675a213d642fe2d6376bb057cc25c4d3e4093409761afc772e69
- MD5 994aa1bd3bad1290e7253f114f326ca8
- SHA1 9f03e859e65607ed894b6179a18e029886749a3f
- SHA512 83fa1db1a3c6467bdc0fd5ef0d5db55f7ac07d4a68e4d5f1bac719aa7bb1024d0e9732dbff0b9e41e06eb7984aad7cdaf151521a5cf66612adea155f0302ec1e
- SSDEEP 12288:78AS6nxBTMllk8NyO0cscwiYyAvgvu1Gh6FsfopiXIleEumWmq2MmkjEjyZ+I:BSQxBT6lkI
- TLSH
  T177E4CD4123F45969FBFBCF33667AA4512A3ABCEA1850D55E0AC4344D097EB8188E1F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Discord.Net.Interactions.dll
- Size 226KB
- SHA256 4b44e3391c6e5c302ffcee97413e355add1c6a7b9c413ebdec4e504e4e66219c
- MD5 8fc4bb02fd8a3d384faabe389f086d79
- SHA1 6f3bd41da63b9f6210e8e5f1e8becffbeadd0f50
- SHA512 498ff9562789371e8b4dbd058a72733e8fd8c1cdcc1f0e1c324ab9d839c652434e666cd766ce81b82555cfd688ad29a168b8bd945d75c49feb5780657cb7b072
- SSDEEP 3072:4eWfuaV8HfQX3hxydDIxY/u1F4l5M+eT5FOUSHHNqoca4m1Ys3tSPisZD:4eLaV8HfQX3h4Pl++eTGR1Qmxei
- TLSH
  T15A344B2063FC4722DAAF9B76F0A0496A4BF6D605F47AE34D4E4CF9E9288775494403B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Discord.Net.Providers.WS4Net.dll
- Size 12KB
- SHA256 66b3549f2fabc89e30090fb900f846179677dc28e7b82ccfd1b2b5710dfa81d8
- MD5 75a697de77142859049ed61a9b983402
- SHA1 41f43551fc78de055dda9da47a3ddca7e03193d1
- SHA512 e02006957ca262ee01c1abfbe2312af01add592597355e3eee23a1301bae04a2070319c1c33390d92c924bfd9559e04a4c96c513b9fd2f1b1109ed9c35c328a1
- SSDEEP 192:Iqz15ddVA8bPjIixId1hccrFWlf4NoERAuCUEnvH7utPCrHppAZZL83:IqJD/QuI3hJolfUECNfg3
- TLSH
  T186420B16D79C8923EAAF077D9976620687B0AA10E703F79F1CDDA0E628933450C507DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Discord.Net.Rest.dll
- Size 1.2MB
- SHA256 ff9d22adbe079ca3594adc1d32149eb1fbe42656a8cccb68316672b60c94e399
- MD5 165817f45147dfbcc73c228a1593a1aa
- SHA1 cd8a600390423c9fee7fdff686d41bd0ebfbdd49
- SHA512 ddba255659b162b5bbbe0af36dfde7249cf2e187edc1f9f969b42c22efc5178ebf3dd0f654e5015eb4f830c6fa533228e2d12b5b050c7266a5a2b555b3b86a3a
- SSDEEP 24576:o3a9PlDcJgLCRvBO/3C77EPwvobfjTE37PtY:oK7YBO/3Q7EP9jAZY
- TLSH
  T16E552B55B354CB36C18F363BA477C31BABB2F540AB5AA78F064CFAED2D613504D091A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Discord.Net.WebSocket.dll
- Size 744KB
- SHA256 25046186a2998cad6719bb96fb52d96db234f85a971e48399da99607791c7a16
- MD5 9d97586c09a2822c7f49ffcfc455f97a
- SHA1 369250d9fb0363114780adde0d5662cb664861b4
- SHA512 65e4bd76515ab4a9ca029c3fa4d840e03a865e32fad2c39e88a8c545cc619aa79b8e658d80a861ce161f96c48f8f578888f30279d4881b51de51133df5ee2338
- SSDEEP 6144:tv6XovMrOeXpUqS3sqseBixafS2aZUW5vBOXyhmxTAhLO2GI71SApURRSahUXkRG:t6IMq8qseBiWJuUoZ+ZyqLRjxn0
- TLSH
  T199F44B8BA76C8E3AC2DF72BAF9944A5EC362E245975AE35F434CE5D43D523019D00B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Discord.Net.Webhook.dll
- Size 30KB
- SHA256 433670c11e65f53045647ba06e8ec17fc5257b1682992bde8b6a327e84250d54
- MD5 f37ff15f9627252dba28b3e074cb9a56
- SHA1 0adef763cadd9a916d8456b699ddf072dec8412b
- SHA512 502f59886b7a90688972f1fd9aa8006eb6584124450803185606f780830791b1fc077d25196f23916e233e3614b61c92054670b7945b45f544d972c09efb63bd
- SSDEEP 768:sy7SrrRO0nSa8qsZBAJ3+piaGXmt/P/ghUr:n7SrrRO0n+LByupiVyghUr
- TLSH
  T19CE21B39539CC72AE6EFBBFDE9B0124A5371E901A822FB0D494CA2F92C577515100BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  DotNetZip.dll
- Size 461KB
- SHA256 8e9c0362e9bfb3c49af59e1b4d376d3e85b13aed0fbc3f5c0e1ebc99c07345f3
- MD5 a999d7f3807564cc816c16f862a60bbe
- SHA1 1ee724daaf70c6b0083bf589674b6f6d8427544f
- SHA512 6f1f73314d86ae324cc7f55d8e6352e90d4a47f0200671f7069daa98592daaceea34cf89b47defbecdda7d3b3e4682de70e80a5275567b82aa81b002958e4414
- SSDEEP 6144:DuCInHLhJI4FY/ixjci6ychf8xalGQGtSV41kJDsTDDpBnse6OVxLV/W:3QL32ikCaUS4csRBse6sfW
- TLSH
  T180A4AE0427EC4B57E1EF5BB5D0B2A5A2C3B1B462693EEB8F5D4024EE2C17354C911BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  EO.Wpf.dll
- Size 1.7MB
- SHA256 3edbf00e3413725d476ba59aaf5f4d6b67ae6b446bc598aa3bfe37dd6114f033
- MD5 de87c8d36795f1f6652b5a855cd4b04b
- SHA1 7edb00a76cb5f3f9742a4f08c249dc51b07767e8
- SHA512 dfc85863ea69b72719d17bba1b66ca2b6e33b0c88049c37c428cc9de06bc60887d2225b4ade52519615d0b6c010c5ca7d150990dc2232c7292bf468351c02863
- SSDEEP 24576:nBtZa1hz8aCwbyKlubOU7SSR5Jl0VQcT55WlXDrt8k7K9ibtiB3Q7iAdSHjm:nBvaXzXhbrYbTIWlTrtM9wsB3zH
- TLSH
  T148858D4CEE99CF27CFAD0732C111261443B6C057F383FBAA96E9A5B45F427668C891C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Hardcodet.NotifyIcon.Wpf.dll
- Size 95KB
- SHA256 6b7a81f9a501f36fe050d94e57dc7456b1c63c58bfb214863fe9748a2a22d146
- MD5 c37391572efad4b7df720123d7a35ea6
- SHA1 512b4ef31601998e3749223e067a96c95e3e3f78
- SHA512 6866d4995499acf40d6102b2bdab27b951879523b2fcdc61c40793811b1ced7130dac2c9cb5b865268e8c4b2fa28ac5f92e4b4aea81833a7aa262de75b4ae68d
- SSDEEP 1536:en5VJM3T5szyxa9PKIKfgAxyzN5xNVkvVFrSc0H0cfNbQSuksKHqocaFT34:eWsEa9CAAQpNVkdlqUKcksKHqojFT34
- TLSH
  T19E93BF4133FC823AD5FE5634B9B233218334A942BB62DBD949C0516C5AF7BC95A903DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Microsoft.Bcl.AsyncInterfaces.dll
- Size 21KB
- SHA256 295af2142d9214f3fd84eafe4778dca119be7e0229f14b6ba8d5269c2f1e2e78
- MD5 48efe61d6ca3054309907b532d576d2a
- SHA1 f36403aabb16540c93fb35245ec0b4e435628aae
- SHA512 778e7c4675d8fde9e083230213d2efa19aa6924fe892ed74fa1ea2ec16743bb14b99b51856e75eaef632d57be7f36dd1bc7ce39a7c2b0435b2f3211bb19836a3
- SSDEEP 384:O/9b512C4dABe070VJI0Ftdalemxxf34wqsWeb/WjR/uPHRN7Y5slu6o:O/f1IDjV9UPPpWRMkT
- TLSH
  T189A26B11D7AC4317EEAB3FB19679D1062E34E7D6A821E32E108CE2652CD73859731739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Microsoft.Extensions.Configuration.Abstractions.dll
- Size 24KB
- SHA256 4891b08c0157568e97b003936391841fb08684e96339c9ab6e9b060c0b2cc46c
- MD5 700a883d56bb05b55ae1a7e80f4187a5
- SHA1 4957c67dcddc2a143d5fc9717516594d0d71d7c8
- SHA512 b61e0287c56b976a0cb0e1b354bded2dec15de05fdde89a63105ac59c04327d6f31403858e519a83014cd451b03cd6f1504a714c9f69f25c6b591cb362f395c6
- SSDEEP 384:sm++Js0AtZ7WuzF/R9iaTG/0wEzRjz6qMvJsOhAWM86WsrNW0/uPHRN7LmG24rlK:LlsFfypvi8yZML7CL
- TLSH
  T1F0B25B1A97AC4733D8BB1F71E9F5C8052E3AD7A66821D71A5C9DB1090CB77C08722739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Microsoft.Extensions.Configuration.Binder.dll
- Size 33KB
- SHA256 ae8a3884e65a8a036b30f9fee071271090de347b9fe18f592716199194033480
- MD5 244a31f1347f473a666e9029bd2cd8cd
- SHA1 c5581b7ee7b4aecc2dbe5c93df01613c2e95d765
- SHA512 fe8d7541a5235fd4be2073b54c32fc8b57ea417941a0e556da696efa4c0f63dd1ff99577ff1089fa677f1b741903f7db3a272506b4fe92ef36c5c719650ff798
- SSDEEP 768:hRnQyuN61yltpytwu4ma4GAizm841KP4fMnXc:hdgA1yl/yqu/5i68/P4fMs
- TLSH
  T10BF26C0A93EC8B26D9FE1B7068B1E4615F32F595B422A3085D4DA02D1C777E0D76233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32