ab7d51baed4320775a988bd47926580a84693ee3422efd2526112d5b6e6e2453

Sharing

Copy URL Twitter E-mail

General

Target
install-tl.zip
Size 24.0MB
Sample260603-pg6dmaex2w
SHA256 ab7d51baed4320775a988bd47926580a84693ee3422efd2526112d5b6e6e2453
MD5 34d8c618c43afaad048f12702d0ffcba
SHA1 fecd888f3a0e115ec914c5c7fe9df791042a5348
SHA512 becc9376f99c2d51a5550e1e00e7c45ebc45c5e0bf8d91169a6cbc138c46f7238576e2bcb3c62e578895257a2b43c9baac44ed60de7b9676e2e1cceae55127b5
SSDEEP 393216:K2TC13XNcCf1IE2vjRpAUlozppA+n7dRAi1y2dAFEEwg4kK1Ud6TwHu9yX2TTxx1:UZNcIIrPAUSzQ+7dRw2gM21dLHCxxi6
TLSH
T1404723A5D958BA31FEAED331818BE25244C33F95F3563B2239266153DA2F2135733D0A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  install-tl-20260603/install-tl
- Size 124KB
- SHA256 0cb9f1d9e8781f7a4771da0c3544e40a091cfb2b444d809d74f9f510147e769e
- MD5 a6c8931d03e927858853e75b48b22aba
- SHA1 936521033b2a525f850d18da202ea4c1dd923bd1
- SHA512 ac25776be58d7821a2d0203e5a28ec73c2683b7a47c7c35ec0d0818b03c3e97a416382ce43ad36fb6178f278ba3253f8f4de78a358d815bf68bf4e70251b7721
- SSDEEP 3072:0p4+IT8QZv9yxymOLpG3gEce5SpP0QmLmlXYx:0tIT8QZvdXLggEce5SB32hx
- TLSH
  T1DBC3F9063AD6A73326A361FA7FCF9095F719D0671016EB24788D82981F4717C42F7DA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution antivm
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  install-tl-20260603/install-tl-windows.bat
- Size 5KB
- SHA256 3df80a388ebef29593840835f69c771bb0614974f7346709b4e8302bf3e3db69
- MD5 6bf9640ef7c33a8f5d7e491dec479380
- SHA1 3a005741861f0b018058772ca95710096649b2c4
- SHA512 ea1ea7e4f0a270b00f5abb88eb1802d2acc64cfef6e1759dd7623a2be3c2374192292689636cbcc9131419625dfb77a608283770bd2723911b9671dabb8c0503
- SSDEEP 96:FXbz8uizvPpJBCD6LmVU8alQPKsxMomaXyIaz419ar0M7u/lNO+zJaPpL:Fv8RFJaVDI1sx9maPaz419G0MPJ
- TLSH
  T178C1711A51012EB63CF193A29B36B511F31DD166673AC5EC38BBD1E76F2B12281336E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral5 behavioral6
- Target
  install-tl-20260603/texmf-dist/scripts/texlive/mktexlsr
- Size 8KB
- SHA256 69ad33f540131258c479e2045ba875ca1bdf0f83932c6c5c3d0d99b262966ef3
- MD5 2e3ea4872d1461d2607b6149c574054e
- SHA1 6ad3fd8bd9210ae1c6962467e60c24f68f6aa2b3
- SHA512 c3cc5f3b22c9e6d88ecfc3b788b89434a014dcd22c4615dcc74e3b2949e6f2038b6239c99a4f3d75af7d977f448228e7ffb31ebbd751eaf8084dbb92b40327ea
- SSDEEP 192:Tma0T1WxNzyO3a+2Vp8jpdLvC2U4qa5frKx/uXVd2Q7GE7pRJTL:aaCWxN+O3a+MWpdLvdU4/5T0/u7HKE7p
- TLSH
  T1F402D806BFC4A770045382B56646B081FB18D12F8869AB3CF1ECD1495B62B6461FB3BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  install-tl-20260603/texmf-dist/scripts/texlive/tl-errmess.ps1
- Size 134B
- SHA256 1a0fdc2d943e070d8bef825f86e550c4417cd208da1bd86edb28e09d205a069a
- MD5 b544831e43daf0749d58eebc3555a179
- SHA1 e7127c65e268fe5f32dae6f73b95e33c28fd831c
- SHA512 98739ba4b83d28a3d9d5981b7469f07591bf8d455a5d5f63e62dd2dab22738e5ae9d2920f2a54db283a0a49cf9d13acad6b95de61c37216cd6e9ba2fdd03b3f7
- TLSH
  T1F5C02B946E90CD064235C056BED2B00238504220F0007401411C5063C8100079F74302
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  install-tl-20260603/texmf-dist/scripts/texlive/tlmgr.pl
- Size 353KB
- SHA256 6ca7f45b04b4c01c35ff7f0a275721edeadbc4b97f72f77eaddc6eb270f4f47a
- MD5 1765788fcc7ca4589ad8ab61b48e10f5
- SHA1 cbe447c2a0a6540cce069b1d4846c4036d71262e
- SHA512 c217db7f9d1be386169ef3747ee367bb834546f0e6c6432d69f94415aa18426c5d94f10193269bb3b5b194901ddb840f778e7ecb43825e6cd9c552ba2961012a
- SSDEEP 6144:olhnAbJlvRaOxg/vpwKTn6CwLl+4OeBibsAAmCuHZpYSuz8W8y:Dm/RwKTn6CwLl9nh
- TLSH
  T15D74E71A36D3A73315B325B56FCE90907739C1AB2228DA517C9E81D82F4247887F7EE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  install-tl-20260603/texmf-dist/scripts/texlive/tlmgrgui.pl
- Size 89KB
- SHA256 318c715466338b2cb3b1f97db5e7a50c783db030846c4f938e4da31940aceb43
- MD5 3ea3c51bbb567014f2b4558a2e126d1b
- SHA1 ef4e473a05a9e0d1290356bf4f93b5c444f353d3
- SHA512 c9aadc36c2683e39a942c5f7e7102b106ecc839b2f2ded29f0d6b7eeb3e063c392ecf866b11daae05fdad7a2bae0aae694f8e1264d369f26a86974f0c4e1b8d4
- SSDEEP 1536:5bNxKZiwtv18S9yJ+XS+bsoMXlKJlV6lK6a:56ZWS9yJ+X4Wb
- TLSH
  T12393B64630D752278AB73475ABDF40247EAA94C7224DEA823ADD71DC0F86478C8FED61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  install-tl-20260603/texmf-dist/scripts/texlive/uninstq.ps1
- Size 287B
- SHA256 5c4a041679b5371c0419aa783f03f3e391b3c20177cb83abc044fd388719b66c
- MD5 44b05f3c655941dae8f9ea5e832826a0
- SHA1 f2d5bc1ae253671ee6b5ef6edca7aebf7b96d220
- SHA512 b07bea1bad61592b269c3f8610a7193ae03b1a5add5f2e28b79d37c7b3827e9d1e4c7a0d936a23674a6838693dded2fe807312676bb8b7deb00f2068de581e66
- TLSH
  T1E5D0EB85E2E01221CFA21271BC8360CFF4F4033062252E3211EEB146D84201A00FB682
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  install-tl-20260603/tlpkg/TeXLive/TLConfFile.pm
- Size 21KB
- SHA256 33af2b63741c654d815f256a73c24f5cd5d55c052c3852fb55c6e6eb123110f7
- MD5 1f966e64fabfddaf435f6d0890ea6a56
- SHA1 8c212c2825e852a2c211300909e40bfc17ddb8b0
- SHA512 20a9f3fcec9db87707d6ae3323804ec8a970420df4a59e9c9f2515d1c0fff9855aeeaecaf805d8edf10dc0320586833a4c677f2d9d4deea1ef70f8a714de136e
- SSDEEP 384:YJSnU41e0tMpij8Zl8kAICElgJKUpUu8TDc:YJSnNe0Fj8r8kf8KuUuZ
- TLSH
  T14DA2B70A38CF96270066F8358E8911186A1DEBD3662DE9807C7CB5D49F91D29D2F6FCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  install-tl-20260603/tlpkg/TeXLive/TLConfig.pm
- Size 12KB
- SHA256 4a1c6d02c02d86ecdf3a306fee4b0679f28fa5ee73be22002f3c1e410982b127
- MD5 b4b9fdd2ff79da115f8d20fe0f353bbf
- SHA1 64ae4d14581d6cae369cc279b332164eda785f99
- SHA512 66a808e3dc63fddacf292963fcc355108babf319b216d8b641ae3d2fd22e5964db0926f66aac0e9953ecedb5c6a2f4e60762d3bbf3ba8dfbb8ebd5bf5aeb996c
- SSDEEP 384:0S/Li6NouplqKYcEnZF6EXcZ5ZshJGHk18j:0euQFpcKYcEZF6EXcZ5ZsyHRj
- TLSH
  T101422A1F7295833328C213E6BA2E86165738E55B6255D8A43C5EE1087F1F83A03FB5EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  install-tl-20260603/tlpkg/TeXLive/TLCrypto.pm
- Size 19KB
- SHA256 70e66670a9235d4636dca71bf7ed4c764fef866589bed79dbae7972961c21f2c
- MD5 96f79564e8621ca7b0705b98a29a6ebe
- SHA1 5557b405f6083a8178256493eec26efc8644c184
- SHA512 ccc4dfe879123bea3fc1bcfa4659195f3a15790a26f924f065f62c2e2cbf053ed6e803b913566c975ae69e9a940f04902e8ff98d2f9001dcfea81a7b9ad6252d
- SSDEEP 384:wLZ/gVzdkWs6vBprG+R99XvK3rM7jcwmshym/3M:VVJvBpU3rUcwfhU
- TLSH
  T1EE92821B69F363660A6FD1A42A5B8168B7568ACB0349DF00799CC0E56F18430DFFF5E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  install-tl-20260603/tlpkg/TeXLive/TLDownload.pm
- Size 5KB
- SHA256 aa047b1128c34a3320204033ff8e2d5d6e6574a6baafbfe743cdc08a651adb98
- MD5 6bbf7f63d25a1af65ed17614ce5195d7
- SHA1 731b06ab9e90a58700f4f152a5e8ccd1c713971a
- SHA512 2442dff89a6a47c9142317e16c4d5427c91a8d464805fe2094e3a21ee8f8f2285912242315cec66fc61c37a98d7c79e806d657020fc85a3ed05fc1e51e226647
- SSDEEP 96:wBNqeN0XPr3veqxMM3EjTclhwaEiNkETqZYW18f5Jn0dW2Sjcfb4t/+l8hW:F7eCITehFEiNkJPiX0d1WI8hW
- TLSH
  T140C186CFB092A6136DB28036754EB091BB5DA1072A1E8560BCBCC0996FD783559F38DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  install-tl-20260603/tlpkg/TeXLive/TLPDB.pm
- Size 85KB
- SHA256 08bf503fe9f392712e42074e32465e1bd57c3ff8b287fc9e8c626e34e730d950
- MD5 9cda219ec4a64c4b0f995382054e0142
- SHA1 b223a38bb6fafd76773b3ddfd4c7a14b9d3e290e
- SHA512 417bfee2362bb014b167059f2ea165a5671753c09c5927bcc7fa33879a0be34048e50f1284240e6671526bcf9248b7f467e2a98279e2a8433aff4c77e4a8cc95
- SSDEEP 1536:hcomPBuTk9nVBmJVfTgSDFEiwijVl2R93bpF3Cdh/H8z:yxrYfTgS5wijV4R03/8
- TLSH
  T17A83A30974D3A73265B3297A2ECE8004B71DD4A7251CCD603DADC1886F9283996F7EDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Unix Shell

T1059.004

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32