7adffc1c0b3fdcba46e8d0a81203c955976d4ef39893c98d0b2dbfbb8d6a8ec3

Sharing

Copy URL Twitter E-mail

General

Target
OneDriveServer.zip
Size 1.7MB
Sample260417-pgp2msdv2n
SHA256 7adffc1c0b3fdcba46e8d0a81203c955976d4ef39893c98d0b2dbfbb8d6a8ec3
MD5 752a7188f2bab1926a63254e29f3108a
SHA1 3cf97b5207e51a1ae8e640450279abef204f0466
SHA512 29e00995e35d5b6ac58d33e6e8296b867a9e0a9fe721b657e99dfe9793200097176156a90dcffd8de48403e43a5f8f5551ddc444154aa168912c8049d6eafa22
SSDEEP 49152:xVN9Mu/qTBHt+CBJqbe9BkitnoDfqfTurHUezJ/T:xVI+uBHtFqbUkiNWfCTo0ed
TLSH
T1C08533F7AEA65EFA183DC41CE60789812013376EED92FC43A971541116F8B925BFB2C4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

defense_evasion discovery

Malware Config

Targets

- Target
  OneDriveServer/OneDriveServer/ScreenConnect.Client.dll
- Size 399KB
- SHA256 c24f3f38cbad5591ca72bd3688b3bcc67b311143e3418905752a88887c649c12
- MD5 73f5f4033295f0cb4fe0347f677f7ba6
- SHA1 c1fe83c93d7c3ed97a8405a2c75317dd4c80eead
- SHA512 5e68abf0345490829f3e43174a72d1e043a89c94d07adf5a26e367aaa45ae57ec0d51e7a8ef3c2f116ca153eb0ae1952ce922f4fd980d8fa7a247293a47b61e0
- SSDEEP 6144:oMq4l+PvJNOZvD8ETEavHy+vd7JPYIYyqQni65/PGM:/5+25DHTEavSW7OQni3M
- TLSH
  T13694BF86B3A44C6DFB6F0A77F45041299E73AC456552F26D4E04B8F90AB3BD28740BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  OneDriveServer/OneDriveServer/ScreenConnect.ClientService.dll
- Size 78KB
- SHA256 881377643cc610e41a458b2797ac8ca4f018d3f39a1effd40b521ebb52c5e7af
- MD5 4ec378ab38ad1512899de74ed30da605
- SHA1 06324f0f48c51d97fca0222d3ab2a9f1a84561b9
- SHA512 1dd6e2967f44dcc5354abf5c12ace9204df1b6dc6072dd901301677861cd48e62cfb543647059d0a2c698ac6a01cf73d52c53c37e28afe0fd78fb29dfa2ecd7f
- SSDEEP 1536:z7xQmiDHn5f2yoI4vn3R0asV7k/QQV3lTwmkbP5Ck7l:z7xQmKH5eygf3R0T0QQVFwzCkJ
- TLSH
  T118734C81A3AC5E26C9DF4F387465B0450F709A02D4A3FBDD9D8EA4EA1B563C12E043DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  OneDriveServer/OneDriveServer/ScreenConnect.ClientService.exe
- Size 93KB
- SHA256 ecd5ed16975d556d1d17bc980f248f8a5262bed11df9d9cf999efd9c273c11df
- MD5 fcb58cddda40825616c70c93b312a79a
- SHA1 94acd6b46cce2a0b84cc5efad3e661eeaa58a612
- SHA512 6f49c9bcb3e0fd81516996b2dfa805e373577d33a5313bb5df209d2ff845e68dc569297b10408d15eb506790f1b588c96ed030efb7ea3a57ec7c5b010a3d4748
- SSDEEP 1536:gg1s9pgbNBAklbZfe2+zRVdHeDxGXAorrCnBsWBcd6myJkgcrU0HMX7dFo:JhbNDxZGXfdHrX7rAc6myJkgcrU0He7o
- TLSH
  T1C6935A13B5C28872D573093158E0DAB09A7FF9615E21DEAB3788022E4F741C1AE75EB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  OneDriveServer/OneDriveServer/ScreenConnect.Core.dll
- Size 537KB
- SHA256 9a1f0f3a87ee881d118234fe467b7dc7edee33cc67735380d60134d522b38fc6
- MD5 5506ccec11c6e686d88bb3b929891659
- SHA1 5986a191d71063b7da8a7639277f60cd32437c8d
- SHA512 7e3b579ced5e2528408eb93460b948faf6fdc7a1f03ed5a31fddfe3bc15493bebaa909f98eb508a8ea6b38a8ebfeb91cead85e0134b4d3700a370d4a1c614058
- SSDEEP 12288:h9Pv9VBxU3n3yXARw/OZ6bzZi0eog57eqeuuTZRB3lFbyks10:7zYyAMxds10
- TLSH
  T17CC45A4A33D89336C99F47BEB8309A440B71E415A53BE75B7E30F6AA1D833444F452EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  OneDriveServer/OneDriveServer/ScreenConnect.Windows.dll
- Size 1.7MB
- SHA256 cea1d85967d2c456fccecae3a70ff2adfe4c113aacf9d18c35906c2ed24ca9b4
- MD5 cdc55f204dd2d7e2240d5b785250e68d
- SHA1 19e1234a94f0445e8fdb9ae0f75554292db48c1c
- SHA512 8db2842b8ecb7508604da882632a98580f849a266431f417d740acfdac4f0eb19bec6ee80b4f99af3152feab49f952dfa29f00ce0eb33e25ddbf6f53b3a5fcdd
- SSDEEP 24576:15psFj+Ifz3zvnXj/zXzvAAkGz8mvgtX79S+2bfh+RfmT01krTFiH4SqfKPTsUTp:bpsJkGYYpT0+TFiH7efPk
- TLSH
  T1D085AD41E2C365F5D46B047888BF572AAA743C080325CAFB97D4BE356D33BC09A36796
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  OneDriveServer/OneDriveServer/ScreenConnect.WindowsBackstageShell.exe
- Size 59KB
- SHA256 4a5ab50d7c2b63271dc1972f996b1af87d4ab9143a9df10d858ca7134afebc5e
- MD5 5b86dbd8a8a9693958f720550e07924d
- SHA1 4969ce6ffac0c73f82c20bfd6deed43d7bce361a
- SHA512 225a5c62c15876ec6a80a523ca197c3dfeea1fd905cf8a1b16f05c27b151d56fed5c1a4d0cf01df2b834eae1cb67e4c9ee363b1b677de02bafc8b64e0f1cae30
- SSDEEP 1536:ooSOs/MRZFe9aqVDvmDTyQX5E+TC7rh2syGbUc+7qE:ooTsCZFe9RmyQOjIc+2E
- TLSH
  T156538E5163E84615C9FF2E7CB8F2A1141EB1AA439441EBAE0DCD65EA0E537816F203E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

defense_evasion
behavioral11 behavioral12
- Target
  OneDriveServer/OneDriveServer/ScreenConnect.WindowsClient.exe
- Size 604KB
- SHA256 7cd74f5e0fb8b9cdf3275a03ac29f25c88a2adea7afa1a1a0e719a54be9d9e2b
- MD5 f4f235efd9873261762b4d940972d756
- SHA1 9a329c0692f3159113ebbd5daab0e11647415bce
- SHA512 68adf767d82b243e171fafc6675f41fd907d6374393e9067f26ac854cc3af3936c5be2b30257d4bab079d63efb01409f2ec82d43d3a9ccca3524e1e2e803db37
- SSDEEP 12288:6yZ/agpEXLJSHIUf8QpnsdW4B1bjQchpiF9zi9mMd:7SXLglsdWS1tpQ2oMd
- TLSH
  T19CD46BA177FC9A3BC8EF0779B0E1142757B0E845B686E78E4904A4D90EC73916E483E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  OneDriveServer/OneDriveServer/ScreenConnect.WindowsFileManager.exe
- Size 79KB
- SHA256 0fdc044e6e6be34d0654bc7858e10d022bd8c115c16cdd157184aca08715e45b
- MD5 8a42171f41094a13b86a2b4fda8c3920
- SHA1 cb348ed6424fd169ae190d1d249bef5fd27f3b24
- SHA512 c9de08d5bbb788499c039e55ff5e3abcb46f1ba00096026d897a5bb08db0daf716bbdb1e7a53ae0dabd9ac1bcec0d835ecdfcbeaae6a62dcd27398f26201c7d9
- SSDEEP 1536:Ety6l44tzbwSI5kLP+VVVVVVVVVVVVVVVVVVVVVVVVVC7AJO7k:PUTukLd8JOA
- TLSH
  T1FF83E68235762231DF85C5379492C9B59D366F22133DC5BD2DA2FE3A69F03443A8ADB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16