dfeeb22d767e6b45d6517fce933e2fd5368227a38024282633946ef6ab0e3dd7

General

Target
New Compressed (zipped) Folder.zip
Size 114KB
Sample260605-cdbcvsav2y
SHA256 dfeeb22d767e6b45d6517fce933e2fd5368227a38024282633946ef6ab0e3dd7
MD5 e5dfd32f09f32921a5c78be4967a0aa1
SHA1 fe7305c0704389cb3b307078880dc84242b96d2f
SHA512 3cfa5f14be81ba102d67743e31f77ccaa9418e709af82dfb0f7d7aa607b0c51465f03eee3741c337f80045171f7f8f37602ef75b7d40bf916f23f17c2f65f48b
SSDEEP 3072:1tciqvJ8iwrPmAykBaA529bgqjIjiTdnTJitnRg:cbGOSVMjIiTdTJ6nS
TLSH
T1BFB312B6E66BA03FCCBBA778F07557BDC305025CAB0ADC96846D7F78105548AA0D3271
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  New Compressed (zipped) Folder.zip
- Size 114KB
- SHA256 dfeeb22d767e6b45d6517fce933e2fd5368227a38024282633946ef6ab0e3dd7
- MD5 e5dfd32f09f32921a5c78be4967a0aa1
- SHA1 fe7305c0704389cb3b307078880dc84242b96d2f
- SHA512 3cfa5f14be81ba102d67743e31f77ccaa9418e709af82dfb0f7d7aa607b0c51465f03eee3741c337f80045171f7f8f37602ef75b7d40bf916f23f17c2f65f48b
- SSDEEP 3072:1tciqvJ8iwrPmAykBaA529bgqjIjiTdnTJitnRg:cbGOSVMjIiTdTJ6nS
- TLSH
  T1BFB312B6E66BA03FCCBBA778F07557BDC305025CAB0ADC96846D7F78105548AA0D3271
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Gorilla Tag.exe
- Size 652KB
- SHA256 e40b4d8552ee26816f18360dfec0be5d258e622aba1f2485e4166caadaabfa8c
- MD5 430e43ab21d03582bea7c6e9cbb633a9
- SHA1 695f0baa20f1dcd32e1e8cdbc8b6541ded1bfb3f
- SHA512 754b67915eac9081442063c45cff76cbf90cf22c6d0721d47b4267c03c1c48dc21017adaa27d5dcd6b5984d5ae3940aca05dd4f072978c3399eea22d53eaab62
- SSDEEP 1536:An6FL0B23UTvCDPPpOSOPvuMXuUUhCKZPRcGkiRmzVHsWMdo9dl1HcUIc/bn2lds:BwazAjvuMeUwZPR5YzK4jHcUIcLBSnQ
- TLSH
  T170E440462016F48DD57405F9AFC5C2FC62207FA8395AA3F617E82E3B360634DC95BA93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  MonkeModManager.exe
- Size 92KB
- SHA256 6ace08b97457333f9aea5ca8d4fb4e72170c1fa4aa4c92df82cea73d1f438377
- MD5 21982966b8fedf70fa647b1eb0643eae
- SHA1 a05100bcd4540337bc5525fccccc0d902e95b696
- SHA512 664549735317e0f719f7880e70d4cf2504d5756aaf77d7b281af49592661e5d5d8049c159ca05008b51dc46bfcaedafb6184a1c91e407d3583477d2abc26dce4
- SSDEEP 1536:UwLpukG6RVSumlSuUeReDxCQhvXTMxb+VLzwRG953jSiMFkq1V96uIKPoR:3LpuL6RVhmQuzRArpSWLzwR05eBPwuXk
- TLSH
  T13A935B1033F84B27E6FE9BFDA47505110B72FA0B6522EBDC5E8960CD19E37406612BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral5 behavioral6