90338abb0457bf3bb10c7cd1b943f0fded79f1f011acc3eae684bc3935fcdbc2

Sharing

Copy URL Twitter E-mail

General

Target
BigBangWealth (2).zip
Size 528KB
Sample260418-wwpgzset5l
SHA256 90338abb0457bf3bb10c7cd1b943f0fded79f1f011acc3eae684bc3935fcdbc2
MD5 b010b30a804a4b29d929e3cb1ef6aaba
SHA1 6224b7d0b5e349b33d62eda20cf67d296f9ceaf0
SHA512 b28a00d912878eec9ab0b31e1cbff561f7d876cfa0e897e2f1b9a0397b80c3549d940ab1c2f08e071287b700bcb4f91c269264176f36b73077bb7a936837e7a5
SSDEEP 6144:7vcraGBeCwiqLYoY/EV9Y6XV3Cs9Ct0eeWLQifoyRrvFH0OqdRUDZDm6bMezug/5:bcrAriroUj6tkEifo85UrKDZK63z2819
TLSH
T1DDB4C079D31D1033CC6AA971B11B9E4B8EAEB6793FB11C690BC20A04B60F45F7574B92
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  BigBangWealth/MainWindow.xaml.cs
- Size 20KB
- SHA256 8bd421f859086af660d0f7d919c3e2aada6004e21cb883372ba649e403f2c645
- MD5 f1c4e63fbd3d2d70e92ddb08629a9496
- SHA1 bb95e0f5722066c14bfd9c906bead516118fd763
- SHA512 24cebc4fa5cc7f714331db0a0dcd7fdb86a7a8eb308ba4052933cdc103d65877900096232e68b46febd044f9f15915c336939fe3ce5be68cc5c40c75579f52dd
- SSDEEP 384:ZU3U2mzsaMIUu/U8/7/XdD/tXjtDJtHH8WIAnZyetSuEs:ilaMlup/bXdD/tXjJJtHHbIAZywp
- TLSH
  T11092525456498D2D85339229FFC7A00DDFA3161B56BAC534BF8E83496FB00881AB4EFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  BigBangWealth/bin/Debug/net7.0-windows/BigBangWealth.dll
- Size 19KB
- SHA256 3448eaa581690594541e9a4a1f5272d1e94e8418a6183c97bcede75db6c4a64f
- MD5 94cada2180e0669385e0854fc6f16aaf
- SHA1 e11041180cd326e2b2471dd81323bac69c06fcae
- SHA512 aaf9a775e2007b4416767c9ca9df4aa64b94b732d6be3b5de48b37b62c5518abaa28930900267772022d484bbd997c8e8e8b7e53038f12cc2065d50943fc036d
- SSDEEP 192:0IGIyn68MScMEJRCTtFjmeWKwrk5/d+l7Znj3Fb75gm4ifNEWfJ0HYswfIuD01t:J5V3aFyeW5k5/sjlW+fJ+EfIuDu/
- TLSH
  T16C92C56462EC9139ED7ED77F95F782700B78A503A60DCB2932C2504CC9CB3939691BE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  BigBangWealth/bin/Debug/net7.0-windows/BigBangWealth.exe
- Size 151KB
- SHA256 c8f13547e35a4609a59398a03b498f2ccf3b2b0af184d62d2bd1b6310884fae2
- MD5 21cc21661343fc84dc67db896c070355
- SHA1 0326ff57c36a24a06b99b3ba5fefaaee2f1649cc
- SHA512 b22d22d61206e681adf1825f181b3aef42b915376aaf8c7d65246bf860a45435be1c8a679041f07bbd2f931073d6ef233a257abd1279c005c75aad2768c69a2b
- SSDEEP 3072:4cNyhtHjhzN2DSJrm7WWy1fb8jO/rZEt94h9oBxR8SWgrH:4cJeZm7mJCt940BxuS7r
- TLSH
  T18CE33A07B2AD11ECE1B7E27889A24942F7767816437197CF0390867A0FB77E49E79321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  BigBangWealth/bin/Debug/net7.0-windows/Microsoft.Web.WebView2.Core.dll
- Size 461KB
- SHA256 c6feb73ec1cb9271f2004d2586fe1833621a0fcd3d04a6fc1dcf08557d634ac0
- MD5 0901d7f2f8b621433f3eaee6a63cb8d1
- SHA1 12bf14a2ad26f568f78e4a9304234a6a990757ba
- SHA512 e428770009468c5e48e843031758d2ec2af3ceb3c0614248b17e90105415d7ddbf9783e5cfa77738731cf3aceaca788afa7405944dea0af3247ac5f0a4638b40
- SSDEEP 12288:5MYWHzByTrx3YSi+iKmRFNge1+imQ9pRFZNIEJdIElxPrEIgcvLcglxMwCepM1SW:5HWTBFI
- TLSH
  T10DA44F2223FE425AF9F37F75557412204AF6FCD6B93AE75E0998A16D0C32B4089A1333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral7 behavioral8
- Target
  BigBangWealth/bin/Debug/net7.0-windows/Microsoft.Web.WebView2.WinForms.dll
- Size 37KB
- SHA256 983a69e9ae41e7cc91962704a903a2c2dd49d464f243a7d101d0b715f723f1c6
- MD5 f696f28047246a651f90900475186ea1
- SHA1 f87c665f212a7b8b3393060ca84d2e576e6bced6
- SHA512 45588b89a24f3db2b5a56bb841480b991efeef9f4778b10e4b8a9a58c651cc12be81c8bf1ceda5badc0b76a03046bdf4b457a00130e1ac0e93cf724e71e756d2
- SSDEEP 768:qN9HFciVtBZDgcEST3p4Jjrjh2jJ+SG2auxvxJKia5/Zi/ZGQKqu6bX6uTHRt8cF:29fVtBZDgcEST3p4JjrjaJ+SG2auVxJD
- TLSH
  T1A2034B0083ACC617EAEB5EB8A5B485620B7ABE837D60D39D5C88F1E90DB37E05514377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral10 behavioral9
- Target
  BigBangWealth/bin/Debug/net7.0-windows/Microsoft.Web.WebView2.Wpf.dll
- Size 43KB
- SHA256 29f6e7dac224fc0ba91e45145e209fdb18c985781280d778aeedbd1ea885f137
- MD5 c83529d6c90dc9644779207d81bb6539
- SHA1 771dcb61c27bdbee4b749ba6d831107756412f77
- SHA512 e42703c1d36c21542ccdef6071d2699b50fabec327b8c4db87e3b830fcb40e7d3f8ae3e951cfeca53c2297089b417e199be07105f199335fd3880ea816424cad
- SSDEEP 768:k+Q2cVseHJ4Wgs0WZ8lBDP/ryEH0yBy4JjrD1h2jBhsUaGzkI7hKKa5/Bi/IGCvS:NmseHzxZ8lBDP/ryEH0yBy4JjrD1aBhl
- TLSH
  T11213289543EC492ADBEF6B74A07496610A3AFE437D71E78C1AC4B0E50EB77D025403AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral11 behavioral12
- Target
  BigBangWealth/BigBangWealth.dll
- Size 33KB
- SHA256 6cafc3218afcc577dca3d95da882655e6801098f2087dc8568f2e96fe36410e1
- MD5 756d60112c9063253f94f7aaf824bc51
- SHA1 01eb3e29ff55ac07bd1f60c6e5d2f409177d13bf
- SHA512 4f32ae728a76fdfd1b5ce694f3c6e0b3d3719627f1cf226ec341b0354fd125f8c6ee538edaf72abe0703ade0afc374e982cdaa95587bdfe40800acd1c27cb601
- SSDEEP 768:JAEanjTWcIcHq/98yUpJuGBuKOcqwGxo+7iQtnhK:JAEWYOD8G0o+7iQtw
- TLSH
  T1D3F2C62072ACC27FCB9E0B77ED748120237A724A3115FAB99756784D6B2634E4120EF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  BigBangWealth/BigBangWealth.exe
- Size 142KB
- SHA256 abba57c917cbc3221042c80d64bb1ac6ae2b8ad43099189796b6d9ff37b29e0d
- MD5 a83d10961d533f413c6881a5120400c4
- SHA1 69a61af38945b68fad2c3a7b203fde0ff0acf09f
- SHA512 1d9c2f916d76075407c51a8e69f3a4ccfda5890883fc16a0681de8809e10bb5cf31def7884662bea39116aea6d769500b27a57062a573eb8bc1a57117abc8946
- SSDEEP 3072:QpbFU9pABEW4OYrgFaOawX1g365db+jAp1:QpbFycEW4OYvibmAp
- TLSH
  T151E31803B2A811FDE1BBA37889A25902F7B67829477197CF0350857A1F67BD09E7E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery defense_evasion
- Downloads MZ/PE file
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Network Share Discovery

Network Share Discovery

Network Share Discovery

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16