01a093b36684a6d19f8af0911a07617457c9b28d9856ccb7cffd882572c0a52a

Sharing

Copy URL Twitter E-mail

General

Target
EsoBR.zip
Size 82KB
Sample260419-e2fnlahw41
SHA256 01a093b36684a6d19f8af0911a07617457c9b28d9856ccb7cffd882572c0a52a
MD5 05e5b4513fc8df5beebdafdc59b69b96
SHA1 d42a4dd9b711fd8ee3e48fa91ed4146a438f6dfa
SHA512 db49e1abd4a555eef1f385f2fc41699e507d2eb517f04f62541076856e3225f8939fba6e200c5906f018e41e4e5e7bfe77b1524209a223119704e02bbb3e9f1c
SSDEEP 1536:SrRL/X//////m/EQLnD3FWjqgp2jeRupxI9seAu606cZGlIcEbtmnWfvtcOrGKT8:Ql/X//////m/EIkqBrI3Au606cElR0fi
TLSH
T16983F1E7C26AF801ED7E753C854B83DA81D687104C05CECF229D1E9D365F2B56B62AC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  EsoBR.zip
- Size 82KB
- SHA256 01a093b36684a6d19f8af0911a07617457c9b28d9856ccb7cffd882572c0a52a
- MD5 05e5b4513fc8df5beebdafdc59b69b96
- SHA1 d42a4dd9b711fd8ee3e48fa91ed4146a438f6dfa
- SHA512 db49e1abd4a555eef1f385f2fc41699e507d2eb517f04f62541076856e3225f8939fba6e200c5906f018e41e4e5e7bfe77b1524209a223119704e02bbb3e9f1c
- SSDEEP 1536:SrRL/X//////m/EQLnD3FWjqgp2jeRupxI9seAu606cZGlIcEbtmnWfvtcOrGKT8:Ql/X//////m/EIkqBrI3Au606cElR0fi
- TLSH
  T16983F1E7C26AF801ED7E753C854B83DA81D687104C05CECF229D1E9D365F2B56B62AC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  EsoBR/CHANGELOG_OTIMIZACOES.txt
- Size 4KB
- SHA256 8bc4750ded2d159bac1f8fdbccb9bb1aef83bfb921ba878ab39fdc7f6c16af7a
- MD5 691620008adecd90f8dcc7b58110049a
- SHA1 acacbe644831b994e3ee90938c0abb7cf0fe6eb3
- SHA512 d97880eaec9f04e1ed35f9ffeadb7de55c36c22267c31e89254e5af1990af07ac1d9feed4dddbd21f6e0baee49e25e132b19831000491e44e3903e627c0f29ef
- SSDEEP 96:JcHkpiePhlmj6Skz0X3Ew0yPyIid5uPFVUw:JcNghI5k4X3E4/k5u8w
- TLSH
  T16591747A1CD706660927C3D16BCB81C3C6949156B104D2A6E5DF5A14A1CCBC8F1FDEAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

ransomware
behavioral3 behavioral4
- Target
  EsoBR/EsoBR.addon
- Size 1KB
- SHA256 663939ce910bc44496639f3de3fbfe8e7d90b1946c9d54f74ec21ca2f4ed2f61
- MD5 c37762711a894d4b02253be09c45b542
- SHA1 46f6636ad9e0a23301baea63fd73cf210acd40a5
- SHA512 f8b1d672bbc008aa616db7bb7704b76d4ab17f12968311456602e8ae85fe251838c4a2a6a7590fb02ae419bc0deca57fd3ec3c6639664ba4ad3f4b64d65b7efd
- TLSH
  T19D21DC6E70223A16CBD4A16B348A6B82D4046EDAC613C51BB0CE580F98C1BFA3040D1A
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  EsoBR/EsoBR.lua
- Size 19KB
- SHA256 4f8d22342e612fc1d2d05d8b88f192d579ad235a9e83167063f2c29f0416a882
- MD5 c6f75d26545586181e5154c35aebda86
- SHA1 bd6bd7661a89cd3d62bb4fdf1b29c6d78beeca62
- SHA512 924da2a87f057c25f52f3a64ac4d3d8974746039707565d2bc53e25da7f2515dd3d2ef5ac43afe79db5c140811b5a7ba52d77bdca30631b9e43957e29c3188b7
- SSDEEP 384:Fif8IPnvPmGP57Pt7bPZAq5mnX35rWGOK9KKqRdz11KTNOzwFJxF2FxANFsSMrCU:FifNnrplnn5mnXprUdskwJDixUsSMDRV
- TLSH
  T15E9262EBF60EA2919D83117CDEBB0943956FE123563D56A1B0CF099D9444F1C82F2FA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  EsoBR/EsoBR.txt
- Size 1KB
- SHA256 4419d58fada9dcaa739c7873c131eb2bbcf33cd3b6c5190fb94db134a108a3c0
- MD5 e98f4b26e0bf48e78c1a944807b3730e
- SHA1 5e44a8f1b8ed8ab90d307c103d6d89dcff6b7a98
- SHA512 4145294e1dff9c4183afd20acf40184a3c733b79d55b7e192fe5ca7473e221203dea8301df646cd7898559ac99dba455399fb3a225116a0bfe58cea4eee2c448
- TLSH
  T18221206E70223716CBD9B16B348EAB82D4145FCAC623D51B70CE490FA8C1BFE3040D1A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

ransomware
behavioral10 behavioral9
- Target
  EsoBR/EsoBR.xml
- Size 1009B
- SHA256 6ea7a5ba062f39574bc1d7f1b876d5c8e70bcb62e5a528884a487ffd3be786fc
- MD5 38bcd4e439a4ea36bf549200cafc2524
- SHA1 27c757f06fbc96bf6fb78ab7a5b89ad77598a66a
- SHA512 50cc57c1d26ecc24f1a662c9b298c89f3f2d21728d9fe65eb62912a3e2b4ab34a1787a653a04812695719d14011b754655407324f7e118b3eed2e0a376e85514
- TLSH
  T18B117A0249E04F221E3B831CFF10AE81FFBA1A9649089092725EB55B2FB1C880A1715F
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  EsoBR/bindings.xml
- Size 311B
- SHA256 f24fdc0ac12f6b951ffc91843f66e973b408431cd7dd11ddccef4ddb87b67472
- MD5 010453361f0d48b783ea993b0ac39ad3
- SHA1 eb905ad050efd2f6d91766d237642483842c4cd9
- SHA512 c6bc3a46a5496c89a63ee2175b8a8077681bdede0e734a9ef58d72978c893fc0a875738dc058ad57f13eb1994593022bedc34771ed2742637cc5327b3b253bc0
- TLSH
  T12EE0C2D403D80D8AE473916995E361C1EFA2A4F7986824A431CDBB1B0FB18B0825716A
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  EsoBR/data/craft_abilities.lua
- Size 4KB
- SHA256 fab31f911f3d0580e44a61093e2cba4334c6e85fc5ddf7974d037ed3dfabd581
- MD5 6674befa7929d039ff6bcec2b609fb0f
- SHA1 721e1e0a8817e276e5c34df1deef150278225528
- SHA512 2e118e66de2d9de1e5573da48c687e195ecd67b3c0520521c310705c2ffd1b86095d2206921d90d774709db823111363470683baf9f1a2e23a42b2636a70132d
- SSDEEP 96:WTwheHOPjNbzNKPG5K9dQKKXvREDNzejQqyutl6R4td7dGyYxnWx3jqRXckqgmc:nw0MqFlAWtnGyYwx3wc9lc
- TLSH
  T157918C771C8F57290017D30968BD1547DB458BEEF37BECBCBCA94948029981266FCA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  EsoBR/data/links.lua
- Size 15KB
- SHA256 096b2ec5b61a2b6014db73599d8375c9a1af477cfe1e31ef7bc370ff60ccff0c
- MD5 2affb174daadc9937dfbe04ac558a83b
- SHA1 1ab6b9affe3799b349c3018dbe0c908eb260b8a8
- SHA512 d31ef5f84ad2dea871993e05bed8adced647b3cf7249d982d625f3884e958030ff9d92d8d18ca9c74bc06c23fbbd97ca91f7695958df34de45cb3819bf700955
- SSDEEP 192:2flqvVk67lcbZR9x5UefBxNEdK2iHA9OxEpHuXBobyiICAl/ojUm:2flqvVk67eZJTkOmpqIyiIPl/lm
- TLSH
  T1F76257A0072AD133C847CF394DE17896DF58A1C5EEE8B5A86F42E7471C9CA8B30F5906
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  EsoBR/data/locations.lua
- Size 95KB
- SHA256 55d558a6053a7fc589d36d77556f06d36303940f286f55181c0fc259aec536b8
- MD5 fa3ecdfb16daa97a9a6f670ac1df8dbc
- SHA1 af28b27d4d2449cf5411984e85f64fbf8aae23e1
- SHA512 8bb020c0eae0308d074eb84ae70070bf020c0a582a2d9905d5108ebed846e9b9d5d15dc695360d1ac9ab37733e66885b4fa68a7bdad2539feed3556ecc2a3160
- SSDEEP 1536:GMBhFNxH0wVT3BO6T0fLlHKkrp9VYG9cWI4z9ftM2G53sPhpcz+BoxcfTh:nhFN5rT3BBMlHKkrRp9cXI5tbMJcfTh
- TLSH
  T17593423F10CF031AC4D7AF91ADCE91F20944456EB3F7C855BAED53582399A1CB2EA858
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  EsoBR/data/npc.lua
- Size 18KB
- SHA256 a1f824f92c52c6dc076f9f16f1e3c1bf10866cfb4c9da2a2be6dc832e49cc030
- MD5 873cffd8952bbca7757ac98024739443
- SHA1 a60f879ecc33c59378c67a8cc324c200abdf24fb
- SHA512 939c545a10e8c06de02cfc57570ab12bc587e4dd8baa5eb4cfc1fe0a2a32e524f80d9087b3ff02ddf54baa5dca7a251f7aa6d8f4fc4076c09730f8ef3485d91d
- SSDEEP 384:4L0vgth8eBgVHvxpUuwzpOszNo2wv+zIN:ith8eaHvxpUxlOL2wv8IN
- TLSH
  T12282B43791CF033DC59B2E229C4D69F28581C2BDF3F9C859A00B521E239AD6173DB998
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  EsoBR/doublenames.lua
- Size 9KB
- SHA256 294dc2554b7d979dcf06bc69a69b43aebb79750ceb260644608d376a08b36a9f
- MD5 73406c107a5eb9249aef68d35948d891
- SHA1 0d3ed6de5471d45e652b7136c126e6f179a19873
- SHA512 c3c63aade9c01c276b111cdcc435408a46be0303826842141c433dba4f325feb3bcf46fd8c9af28ae6a5c8bc8b112f0c099ecbd499c1b6cace0a138f87bd1ba8
- SSDEEP 192:Ken+BTUxf7ZzHi1VBrc97xrENFFBs1fbPEWyPLmFFxwFqtIT/Q2WzQi8LVeZ1213:Ken+BTUxf7NHi1VBrc99r+FFBcIWyPL3
- TLSH
  T158121F2C329F29416A8A3178C1374F8BBD1DC43166AD03D5F0D994A8B852B5EC4FBF68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  EsoBR/doublenames.lua.bak
- Size 7KB
- SHA256 1ded469dd1ffd5f38cd9b83c6079d0bafd1e86ecda317f38cbb9c74097eba340
- MD5 46376c81a170c30875bead14b9aac873
- SHA1 2cf6fe320b68701ff33e57384ff2179b5988cc5f
- SHA512 544e61986ba705a6fa970cabf1585ef4acc033f94bac35f16d4d247659384e91961d328a37b75d1bc66b1455abf74eda7c4deb864d144336090db57bf247420b
- SSDEEP 192:Ken+BTMxAB73DP21qyX6JF73sP73vm73Fg6:Ken+BTMxAB73DP21qyX6JF73sP73vm7Z
- TLSH
  T18BE1E0BC72DB69829A4631BCC47F0BCBAC6CF124665D11D5F08D14FDA4814A9C2EBEB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  EsoBR/doublenames/abilities.lua
- Size 9KB
- SHA256 3711b1ab82bd5dc6e80f1df46c8af802e321d7f5a24a2c07bcbb28dd1eb57cfe
- MD5 0d488c6b595110d49bfac4f26a230e17
- SHA1 fd56cf0da165c382deeca7334869faee4bbba83f
- SHA512 52a9f66ba547f790509e5edbc9683469a3b8c53fa6f972e562e2594a42500551087a935c5b7755f8a044bf868155c70ec89ab1cf81d73f66a307c46c9a912ea9
- SSDEEP 96:HmrLx+Lj09vRvHmbcL8iiZ4A0p0NHJLlsvgmAcLDWLlsvgmaGnkkEKcydsxXkws3:Gfu09vRvHmW89T0Sl6dYl6l9EJdqqul
- TLSH
  T1FF12FE61F11E5560C801216BCE39A78A5A9FE470297C09B2F3464FADB085E0C99BFB9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  EsoBR/doublenames/champion.lua
- Size 2KB
- SHA256 94fe4e145837dfed64948d09ac0f04ddb8c791735c23036b39e7f41d67ad0286
- MD5 4b33c30c22ff7b97e064983bc9c70346
- SHA1 ff7fd28c0deb12e4b54962acf7b6c6bbecca14c5
- SHA512 c252df1784eab854ed3eeb62cbd6f132b53365c1836683fd33857025e0917dfef564f9d3923d1205c255aeda0e1350fb63ec3ebd663d6b40b89794dd47cec36c
- TLSH
  T1FE518C75B20F6984D951206AC839628BC4EFE031256C64E2F6CA47DC705D99802BAF8D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  EsoBR/doublenames/collections.lua
- Size 3KB
- SHA256 4de1746129e6868a0fb6588562ed6cd2cd3e2e7bd2b1414fa04e6b6777b341b6
- MD5 c9f31a90f9eaf30a68c5ba808201b097
- SHA1 5b0fc6842abe1a10ee23f4693af7cac95bab2275
- SHA512 d35c97555888da57de71d40233a0933e6314544e3748b92fecf0f24d188cb2924c80787dc5059c8ecb20400169011e7e2f223b803e6974c4224611b82f5e46eb
- TLSH
  T19761DD45B60E03A18CFB11ECC5F62485AD9FD830913D45F6B4DB21E8A4E0B6D42FB92A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32