3216528754433539aad6351b96a32a554b0988a4ea10b424b4d913dbc6c5095a

Sharing

Copy URL Twitter E-mail

General

Target
Oblivity.zip
Size 128.4MB
Sample260503-b8pnases2p
SHA256 3216528754433539aad6351b96a32a554b0988a4ea10b424b4d913dbc6c5095a
MD5 237f801394aa05d08d6819f5fa072cad
SHA1 63a11f945fac1518aca6cb28ed4bf898b9f3091a
SHA512 8ce83b83dd6c6599281e5b3557dd51023d427649b44e36362430e717c0f56d83c7bae415087e728d7b36ae861694077529a2b07757ef86b64ee18e6b3bed4ce5
SSDEEP 3145728:8FNJhyqMr5G+FGQWvENXeEUQRtLiy0YQ6A5orwPC8xYqrRi:MfvENXlUQvOy0YQ6AyrwPC86qrRi
TLSH
T1B4583322D298858FCD47983E9171BC4E8EE1926AB3D0C9F7B61CE00E455B6B207F4F56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  Oblivity/Oblivity/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll
- Size 762KB
- SHA256 20e411c2760bc9dc98abf08e1ad9346149a5e97637ca5706036503ff72883245
- MD5 bf31df494a979439e9da923cc6d968cf
- SHA1 435263a97b257c13e09d2d7ba70699d3952ac590
- SHA512 22a82220280a6615f772bf6e41848b52bebcbeee3da9a7a32a78f826fbb3a71953a8a9f2a64eebbc57ef767cb10168e1dbfe7186ab6bdd748c97d6fc16f18153
- SSDEEP 12288:hDO9tW5xZpTCJvEFvN9TH+m36rm+QFk0Po1TnmfqX0ymL:EILZpTCJvEFvN9Tp2DQFk0Po1TIq8L
- TLSH
  T108F49D953BA41296C57BD13DCAC74B69DA71B8150321A7CF019843BE2F13BF82A3B764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Oblivity/Oblivity/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll
- Size 4.7MB
- SHA256 45787c6485e062afd6606af40dab5777f2f22fbb61d0a41da8d22985ceae90c8
- MD5 3d26cc1259ca7cca991571bf95177b62
- SHA1 2b80e8f2694cf0289248d23ea59f26628c52dc1d
- SHA512 9215cc3810c99a61f2d7eb5fc0fb83e6a3738337b7f25d29dd11a8c6097474ba280b0f31e3d5cd8648ecd820829c0dea57b676ec7f51f8b35afe27b651629887
- SSDEEP 98304:469Y2vFQjA9qzE8Hrr2jJxcpFzCXSVq5Kz:w2tQjAQI8Hrr2Apbz
- TLSH
  T1D4363956B6B910A9C827C27C8BA75263FA7570446330A6DF8B9017A63F23ED0173D7C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Oblivity/Oblivity/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Oblivity/Oblivity/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Oblivity/Oblivity/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Oblivity/Oblivity/Oblivity.exe
- Size 638KB
- SHA256 1f8961962d4f5bfa856720e69337a7ac005f7412d6f8672992e76b8958715634
- MD5 56ac10beb83fd27ba36d372f95412eb1
- SHA1 0682136ce0e68ea2ed9e3a9fc8329a2317c704ab
- SHA512 f47fa0c1e4072c14a5e279eb4373ebc295050caf27afffdb527d7b103cec7cfcfc72f7026ce10bb946c774f160c12bf42e840633844d0eefd2427c14bae6b892
- SSDEEP 3072:UgXpJozm2lkCsuYDbM8ZG4eRGSIbZ3Yn:jpC62lkCMsDwFZIn
- TLSH
  T152D44BC23190E0DFC1ADC1F67056B9C9526BA8110D63961AC948C3B5AF6EDF0AF2DBD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Oblivity/Oblivity/Oblivity_Data/Managed/Accessibility.dll
- Size 12KB
- SHA256 c36813bdf03fbad922e6558756c3cc2956e6f74457003947fa4e91952445e19f
- MD5 63c434b864ff270ce9fef43917dc8621
- SHA1 bd0a92569b2a14f52bea0dc52fae7238332c3b8c
- SHA512 0770253b619a3f5b8154aaceb924e7c97fabcbc33a84db636662c3f8d24ac0967ba479745df6cc0e0b8e38483d2c93164540eb55ae3add512675360e88b125d3
- SSDEEP 192:b1n3RPr/jgUiix4ix4eJFBRbl9KYYoK3ESmMadMpCNSeFU:h3p/jgOvRbli3ESmMadM4NhU
- TLSH
  T1B442AE28D3E49325F6B74B71ECF7528799B7B903EE75D79C294A170D08212884C63B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Oblivity/Oblivity/Oblivity_Data/Managed/Assembly-CSharp-firstpass.dll
- Size 4KB
- SHA256 14dfa9bc8dd4a464df0c43a344abd0c7ca704456afe5e4d62caa26f33f3b4c4e
- MD5 b3c50f818e23378b26629248be3f26ec
- SHA1 c58ad7b8435f5ca48053bc597845a2c6867518e5
- SHA512 6121833fe3a414ba0bdfec244f58515f84938e3e5d18d8b5e3a00aaddfa0d024382b9dc2717ceb12c2b9495ecd80c0dc550b33caf925e233107fec13519237db
- SSDEEP 48:69+lJ9bYTfOR3l/N5xie8hQJsyDYdV4jdf4a13/FvAYG5zQM1ul3nuq:D7YfU15xie8guVmdf4aX9GxQPFn
- TLSH
  T14B9163123BDC4676F4AB0B357CA3470225B5F9619E25E76F0F84132D6C633248E60AE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Oblivity/Oblivity/Oblivity_Data/Managed/Assembly-CSharp.dll
- Size 742KB
- SHA256 a0975cfc8960bf8e0f55b9e8b4345fd1561e29f50388078b50181e357d87681e
- MD5 81854616fa8ba94f36f80e4178662ae3
- SHA1 6cc43df959d72a13bc0b65709da2fb28603cdec8
- SHA512 058bf012ea394a6bc466c158750db939f235e99985a6265400c0890e733a54ed5293c089ec0a8c46dc87005110bacb26afc170d5cc05d9854181b2553163988f
- SSDEEP 12288:9GeP/aA6Nb4KkPqo/G5lup4ZRbyhEC2ozUEWsyRqyg0XgOOyfeVLBlySGVMKotO2:DP/aA6Nb4Oo/G5lup4ZwhERozUEWsyR2
- TLSH
  T1B5F4292673E85A33D2FF67BAD4B068011370F987A965E78E1980A0FD1ED2B419D02777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Oblivity/Oblivity/Oblivity_Data/Managed/Facepunch.Steamworks.Win64.dll
- Size 534KB
- SHA256 7f4e025564e9b2dd6ac248727b37c9767212c567b18a422629256737524d23b8
- MD5 9b6881f3af33f662ee9a2a8f07016b98
- SHA1 06e4b53d3d7177d2465c9f53e7881a8c4cfb8ac0
- SHA512 39bf3ffa5456db92f5d44c78764efc6cdc5a4c52e7493a1a1940dbbcf4268120538b0b86db3ccdbf9cc3453b11ef3d6827db4fa38ce18968f38829a1e600253e
- SSDEEP 12288:4dMCyDIDge2t7yOcEXJ5HfuhftgUT2lCeamE:sVDge2t7JJ5/2ftgUT2lCeamE
- TLSH
  T17DC45C7A635846B2E5AD4239C1624E1F27B1C16B13036F8F2645E1BB5CF23302E569EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Oblivity/Oblivity/Oblivity_Data/Managed/Mono.Data.Sqlite.dll
- Size 163KB
- SHA256 5cfd7d5e444ec8d53755d4d82220524aa455f34b87a6f740b984d50465d76d4b
- MD5 c3f45469e392a105cffe6ce007a54a61
- SHA1 bf0edef3a0cb5fc35920497a108600d5625b869a
- SHA512 d2fff88539fe6999ea428416cc153500f9ba5c2d130888853bec3568b1599b60d84da40fc3b7f08d4bde439c2d2500c720084064f92277a2ef16840a7cb83ff9
- SSDEEP 3072:9b4Gh78nIXk4uuIgZUHfdNQFNFGFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbz:9b5qI04uuIg+H7QFNFGFOFwcGF6cmFWt
- TLSH
  T148F3086837D8361ED2FF91B8F8B159C0CB71E1226A12C2097CC1149B6EB6B816D53F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Oblivity/Oblivity/Oblivity_Data/Managed/Mono.Posix.dll
- Size 207KB
- SHA256 a33abceffeaa6b6d5dbd2cf77210daddfe331ed40eeae4cea3c5efb0c0db2cc0
- MD5 72c9ea78101c493635c0f763d1795d7a
- SHA1 c04e331b6415bf566e1aa26550bf794651704c7c
- SHA512 4dcc9495000f0cb0d93381a466f8d0553c2f9ef9521ac71979371b5eded37a25224a861ccc101a24b0b2741d30efb71d81d03fa00ca476bf8339c1786d9c46f2
- SSDEEP 6144:9c9wE0Q11JQ1S+OWMYU7nUXxOwblnsAPe+Eg:9c9wE0Q11JQE+kY1SA1
- TLSH
  T18C245C5457B44609E29D6738F8732F098379F88E7E13A39D3799EB391877BC488016A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Oblivity/Oblivity/Oblivity_Data/Managed/Mono.Security.dll
- Size 302KB
- SHA256 2b7651b398dc63af0dbc0038758981c29238a495681a7ed487357a464ad4de15
- MD5 d1b792d07b0e08ef190eb6ef5361e6f3
- SHA1 36890188d80598132d63561ded707e641282f2a1
- SHA512 1229d49068401a078b81ee398524327ccdebcd2fb6134c980d643b76f075244f2670d0773aa35027aa8b8d40ad6c29f16a223b142f3a6595c3641c32c8c31215
- SSDEEP 6144:+JvWNTGENjTzSQfGFzPTzcyaksosrNn95tq:fmFz9mN
- TLSH
  T1C664492923E8632AE2EF9779D071441647F4F506BEA7EB4E5C8250FC2C437929811BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Oblivity/Oblivity/Oblivity_Data/Managed/Mono.WebBrowser.dll
- Size 163KB
- SHA256 7d2eb49a5120d9b1f3eb3c6501d4eed6cacf81f921fbf5c248aab5f0d093f2ee
- MD5 ac6215e0a18a783958a39f6fd8e74057
- SHA1 ac7cbaec3869728b236634691c356512af308054
- SHA512 36eee8f732e6e5c4664dcf77f5d1dc03ded650720624de532cbbd4fe2214accbb2a08365ae2cfc8640e30f8ae1aa81532f867ad303c2798fc5288f6393a78e88
- SSDEEP 3072:ot5akP49r7Mt5as0yAg2TMqEHbbqRJz7FW0g:IP40fAMW3
- TLSH
  T1BFF3E812BFAD5A26D6F98276AC3501C6AFFDD106737EF38A1954FAE899433448601333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Oblivity/Oblivity/Oblivity_Data/Managed/Newtonsoft.Json.dll
- Size 667KB
- SHA256 759accaa5fb7bddb54a2ceab92a3d8ab50750333ec73b62605aea6165d1ca6dd
- MD5 d46892cc58663531b78625cf74acb439
- SHA1 d4245bd8ea576c4250950b337d5d1047c12c703a
- SHA512 fa204ab353a5f9a1885a5fedd5df48db6e37894ed93e994f92fdd273d06e58523c39d9fdfc31a55fbd02a9b023fd9a0105fc871b9ae518430e71b0a9af13f284
- SSDEEP 12288:+m76XVrdlC5KK/BGoG1wQvOFTQ2VS8N9XBBjsgV:+m7w/AAoG81gMXBBjsgV
- TLSH
  T131E4390167F88B26D2EE6379B5309D1983F2F903A376DBCF5918A8B61C537948C4136B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Oblivity/Oblivity/Oblivity_Data/Managed/Novell.Directory.Ldap.dll
- Size 241KB
- SHA256 c1f304fdfd658594fc353dc6cfb5593cef32c0623fbfb6f26acc5e0d40877552
- MD5 83bdaee702eb61a6515a40b40903de7b
- SHA1 0ee79fd4b02cc52729462f18f9d2c321a7e7bd65
- SHA512 6a965b9e01d2012c6b7304a7cba226a42a62a5cd7fd8b6d7b07d8fdb16dfacf0172989fed050eb0206d6cbb6b8c9136442ae4f847c99b49fbd0f6339c764282d
- SSDEEP 3072:l6OgMuqCdVTxVHHK4ZXSCI8W5pzZGJt1qF0qpk7tI9/93H9w/JXWp6b226vyyv+f:l6tnd5nIpzZG1qF0qNGJGX2IRvkbT
- TLSH
  T165342A2227F90319E3BE4778E4FC540E86F5B44AA52AE36F2D8168DF2912701DD90B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32