d9edbe8fd501bb208124b7861840a63becbed76504ba9815befe4d44da570c7e

Sharing

Copy URL Twitter E-mail

General

Target
graphviz-14.1.5.zip
Size 40.9MB
Sample260528-splwqscy6p
SHA256 d9edbe8fd501bb208124b7861840a63becbed76504ba9815befe4d44da570c7e
MD5 928f069f57a12717feb33e0a25bd15e4
SHA1 10571e6435e9e8ad2d2cc44b8e6a378ed4cc5b4f
SHA512 6b6400a706eb780e6b5c177cb50e13859b0a8ca03d2a1d6c63fe74b988a467689cbb157f09b1b91063ee09395398f64937d9bfa9adb15005cb0685fbabd7a751
SSDEEP 786432:RGcpdANRl9TcEg5x4AgTpYBHh8QK3bxUc6t7Gd/hYusXRGzjFEAGX8/KQADXQUBZ:RGedqtgRByQSbGc6d4/iXRG/jGsPZgwg
TLSH
T1039733B0C5022C37D5D210F5B88AC6A3E37EF61AA42F8A2D95DCF97149860513F68F9D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  graphviz-14.1.5/doc/infosrc/mkgrads.sh
- Size 828B
- SHA256 6e57b848730da3100868b8d5d01b247cc1c39e8e07058e26a7f99a192aa5b7e2
- MD5 aa8668dc74d91bbabe8f4fd0fd1039f6
- SHA1 087b7a674967c62bf30b6a4ec770833918d2dd0c
- SHA512 4de795adc6752d62167eb1374de33f1e0b178e0fabf75af7bae686ee7bb1bdc6a75802ae49b9658e11f9de8946d204ebef399b563e742a1cfa9deacda8f498d8
- TLSH
  T1C201894070053226DB8AEDE4628634CDE2158D9F61414FADFE6DC13D9B104A710FE389
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral1 behavioral2
- Target
  graphviz-14.1.5/doc/infosrc/mkshapes.sh
- Size 646B
- SHA256 aebc88d8ba174a966065cc20cbe31948bf94dae7a4c91f558be3e909c0fae48e
- MD5 784fb05ef1d3a87de51a6cfdfc9e067a
- SHA1 28a3dd1c8745fa72259c9906d8a7afeab3f1cb20
- SHA512 09b49226106398e97cd6db5e022cdc3ca78505e91496af7478745bb033b624bcfad819e1c1274ffda88670b2ef324260e2edce5b4aff2c74f2bd6b44c9804d3a
- TLSH
  T1A9F0AC05782A023B200852B24F4014DEFB00883F8E81A8FD781E997D62B5DA612FF38A
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  graphviz-14.1.5/doc/infosrc/mksplines.sh
- Size 485B
- SHA256 b7948d6d98ee8fc2db7bd0282000ea8241e3eee7954a0d4d841a7ec8feba2f14
- MD5 9c007bd85677f561a4ffee7d91dd3729
- SHA1 c1d48e8d4ba3442abe9fe0658158357ef48f4273
- SHA512 97fabb9176b46314ccfd1323cc704beedf65c9719fb054bbee698121fe75fb63aa25a3fca9ead180832a1f33805622c927d2e4733ea5eb2166f5bfb882fc6179
- TLSH
  T10EF05C43E449235D08C6A26B35D636D886A4D25F02C09556F9ACB52813415CEB067F38
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  graphviz-14.1.5/doc/infosrc/mkstyles.sh
- Size 1KB
- SHA256 da2a69b3b1d990513b68d174f76e1a3ac011144d233aaa71c0facbafd4142842
- MD5 831460d9fc88c4ed6b5536cf75063064
- SHA1 87dace3352dbfbca8d482039346d1ab959720e22
- SHA512 57756a7bb1a47b5466d7aa84c75910fa27c20bd6db3e258abbe6c94fdd074867d56ca95a364f80df58f46ac4cb216e8e6ae933cb8203ca7dcaced833db4ce6e0
- TLSH
  T1A3210693B4117236080AC17826D976DAB6180EDF02145CBCB22EC17D5F20C6628FF3DA
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  graphviz-14.1.5/doc/infosrc/mktapers.sh
- Size 727B
- SHA256 0f7cb17ee63361b5cb0c464cf8c2d7d48e625e5fdf3ad8cb78119b6d9ad9476c
- MD5 e6115fa1436c00e11a92d9dc882e6984
- SHA1 35f0fce76e76285e0030c9df378671ba833fb289
- SHA512 d5998742c9fbcdf5333543d70a30a24a98182dbcc52f315d9b7bc94cf18b612519d0f67b6627bfda779e06b592aa63da3b2bdf75be8cc4bf331fce9d722c7ca6
- TLSH
  T1E8017B41B18B717E0105C4602A9A1EEEB131193F42819CB8B4AFD5381B21C6995FBB8E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  graphviz-14.1.5/doc/infosrc/mrecord.dot
- Size 92B
- SHA256 5b8a9fb0b956c4256123add67ad989e6618ba3998184f6bc66bbb9d5e908b0a8
- MD5 c607e44898b84e22f42a5d617929e8b1
- SHA1 46dc56a4c6ac1502e33179c53c2b727fdfae302a
- SHA512 7aafce2072d2298acc0364790289de24925d87d118321494d623b9dc5419d11c82c373d2bba6732af61b710b2034ac45bcd4f1371b0f245f6568e25bbe86a262
- TLSH
  T1F2B012247CF5E4CC01412107D1685CC564052006610F0C2574854A352B8C71CA03D800
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  graphviz-14.1.5/doc/infosrc/nohead.dot
- Size 40B
- SHA256 4fc299b78a4cac53f6f8b2a50f45f7efcc4794c216a52a52e23b921217decfd6
- MD5 974a5fa701124786ac436254a74e65c4
- SHA1 271940eb2d933ebfec4a8cef5875ccc44e4a8481
- SHA512 b270cb9eab691dbdc30ed75446235bad11ed3de71c087993a7fc04452469fa14e435603889cea843a22d34dcae4b01508bf1e9c779fb78b3a8894649f9260769
- MD5 SHA1 SHA512
Score

1^/10
behavioral13 behavioral14
- Target
  graphviz-14.1.5/doc/infosrc/ps_to_png.sh
- Size 913B
- SHA256 8de960ad44d3b9ec07c8776562718fb2842e7f5921c2715e871c88324d3a4ecd
- MD5 4be0d513aa9f57fd4fc6e559f8168cd3
- SHA1 8eb38db32d6d290622273b33e7e44973e3789474
- SHA512 825a2661102dea6a27e452c4dea1839725e47ad85484ea4aaa0e34cfd7d345d3f7174d4eeb040f94e7c09982bbb14ef9b59839c5bfb2329ea883c2dfa8401185
- TLSH
  T10311047267E3256D194198F517ABFFD9DD1D40301AEB0E95EA1FC0322E248B152FAD22
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  graphviz-14.1.5/doc/infosrc/record.dot
- Size 313B
- SHA256 35dd1d22e721b8f57ceb7917ab5c71c03ad0b884bb2dd8790c6a408f26077944
- MD5 a617176d1cdfc3eed287662aff187f3b
- SHA1 0c3ca9bea27308a876e87460a13e5e3e7e213b21
- SHA512 b25f2b0857139def41f3a32f32b9e64e51c2067091ba98aeab76013c013879fb2523d02d4fbcacf2caa89d552a3f13ae4d67fbbe8586f796084ba8bfa30edf05
- TLSH
  T1E2E0CD60F9F6D8DE4A985217E368194FBC022413928F446C71064D7D1F2C78C333D850
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  graphviz-14.1.5/doc/infosrc/round.dot
- Size 209B
- SHA256 74556b8e0daa0b17fe1ac0495b3894130e440354ad0b1dad85543bad27059cba
- MD5 43b3b9dfab43f0366b3ad0d7041b4847
- SHA1 f47f3e3fde6553da1b2842ab82e3955492a1261f
- SHA512 efc9d814f82419858c67deead49f790b9d59a60585bc4265eff8e0eb8d0a1ceeddbc01cde0b74ee167bd063780aabb4af7070f89746484b86216e7b64e69353c
- TLSH
  T1C3D012C650220CCE721F483052566E432E6C1417574B497CD72B6ABD155996070AC5CE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  graphviz-14.1.5/doc/infosrc/sdlshapes.dot
- Size 3KB
- SHA256 32cdb196c0e3d53d07ce741758a2189b1144bdc12353dd161792c095fbb281ee
- MD5 5325eac1227da3afaa538f7310b48a74
- SHA1 df1903815f06539b3ac48206bf39b2f59e50eeb5
- SHA512 afa15c93af1552e102e041b075fbb3871e6256a891a8ab0bcae14e7af90cf1afa811383309b2904b1eea537f0722e7e332444fad2fc0a3916ca3c3ae75b617b7
- TLSH
  T1C77193C488718E87692654A7EAE0761BCDBE52630BA0017DB588CEDDDF1C721F3C91E9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  graphviz-14.1.5/doc/internal_todo.html
- Size 4KB
- SHA256 cf34adc16f2e9a82f6b93a248fbd52ffaed2fbc3492becce08345518e0ae9c12
- MD5 0d69356ed3481aaae699cb32b2638c9b
- SHA1 b5b8bd897238d8f0829c73a7e2be21c65658ad80
- SHA512 ff8816ca0351231ff982760d0d40be2202d1e3a33699b6d8926e02494720fa7191b9aa61a2a61357af08bfa01602719687d257688b15feb6c43918a9c2ca5520
- SSDEEP 96:kHTTuiPtf/mssh1xJkhSXGAyXbz7kIehZ6PbH23iprHgsr0NWjiGIj/WVKqGPIb:4Tui1f/cP+nAC/gzZsbW3iprHVr0Ngia
- TLSH
  T16FA1C72E6118339D9DC31122E79AE4E19718B457E75268BC6FBE83589311C2DF23CB5C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  graphviz-14.1.5/doc/libgraph/Agraph.pdf
- Size 155KB
- SHA256 285b536c4af21e8f6a5736a5ed7ea3578172fdf8f0a1d1a3feeba27df6487583
- MD5 c987d7d67528839ca1cb91c68ff5e612
- SHA1 7af6e34d32e1784c3a409a434977ef5d604e6ad5
- SHA512 5dff5af12e4c55d2899d1ed00904e20f1356c0a2c7cadc44165d3f76efa12fdf6690d1059bfb4b5edcb4f126fdfdd72810d197dad57ccf175d861c3049bd30a6
- SSDEEP 3072:joNSDMenLY8jjCcsrIUyxvhsgRQPLiGfeJh8FQk6OjPOuvCB5/Piw2:joNSDMes8qVsUIsgRQ2+eJh8ak6UZ6BM
- TLSH
  T1A0F302DF9F2D352EC4059802EA5D139340DEC1F74D1964B3384A9F864A1EF39A92CAF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  graphviz-14.1.5/doc/libguide/libguide.pdf
- Size 337KB
- SHA256 2e32307ef936a027393a4d18b6e87e14cec3f4fa92659c5f65bd196ab0766247
- MD5 2861efa80b63a017123a7956da279fba
- SHA1 8fc8d6237d6e86c86ae12b60d1befc9aa84ddc17
- SHA512 7e3af9cd721a0dd147571d1dd47827b3420eb811c034f80374930f0fae77fb1dc762d636235b1c680f0f7ccfc08730bb176d3d57a793c9793d6925aaf561eb01
- SSDEEP 6144:mv7VINPuauxKtY4cSfvXp4Wm2tOupEsZHXN8HmwhTFsuw3YOBJlMWBJu:mTfUSHSfx4KtxpEsFXN8HnhTbnOxMAu
- TLSH
  T1AC7412ED0B3A8C18C9168844D91C398683AF84F50D1C5CB3F9858687774CD9ADD7EAFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  graphviz-14.1.5/doc/neato/ER.dot
- Size 665B
- SHA256 1da192e930657a795490bfe4305b781dacc46b547a205b21052d740d574ff0af
- MD5 5e612f5b8d7ce1edad4c676f5dede72b
- SHA1 169ddcbcf33a3defd67a3155762296d6d4bccb02
- SHA512 71124d1d54fdf7df6e319afbde9240d2005812e1b77f173fe4bc22d55b198e669f88ce0923c3b16382bb411de176dd125a3ff9d3d8a274bc19be971331411551
- TLSH
  T143019EA9909A0027CE0F1CBAF03D97A1746C4127A0112D5C62DCB40F5D62D8CF2C5C3E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  graphviz-14.1.5/doc/neato/G4_lenwt.dot
- Size 83B
- SHA256 cc225884620a1cadb89eb6b902f9c6ee2daf2c161ef1f76e04f5d8e20575aac1
- MD5 d10428b07b2881e0eb28c4572567a371
- SHA1 a5b61af4bbb8afb7ef7381d7002c4ce44453c257
- SHA512 665e12f684d414a5a0d94c920d8ba4f692ed140bcc7277adf9b8d15e5bf249c209350bcb64393915a17356bef57e06b8122b35a313d54473808d81a16f8efa27
- TLSH
  T18EA011B38023283022F2802AB0A002820A2C30020800CC33F32C20202E00FCE308C8A8
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Loads dropped DLL

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32