c3459271df60bc340a3733439e0e652503898dab3d97fb83153d6bc183864a24

General

Target
Swift Executor.zip
Size 6.8MB
Sample260608-1yn2fsfv3t
SHA256 c3459271df60bc340a3733439e0e652503898dab3d97fb83153d6bc183864a24
MD5 3f7461ccdae9a83489a166c630c86a3c
SHA1 9dd41cd1afa1cad94238a128331b27e96f824cb5
SHA512 cc5ac49eaa3b8d304478b17d8309e68629af6e9c3fbc2dd76bc68d0e9f417d14fd235eb59c82037791450ac8278bc4685ac5afc3c0fe8d7e06bfc0adc264541c
SSDEEP 98304:bwBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxZwBOBfKt5yLFxNTZB7ktTq8K+0:bw/tyd3w++lz0byZw/tyd3w++lz0byy
TLSH
T1E876234AF7951CF4E5A3E2758AA1450BE3737C563B3093CF2760566A2F232915E3E322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  Swift Executor.zip
- Size 6.8MB
- SHA256 c3459271df60bc340a3733439e0e652503898dab3d97fb83153d6bc183864a24
- MD5 3f7461ccdae9a83489a166c630c86a3c
- SHA1 9dd41cd1afa1cad94238a128331b27e96f824cb5
- SHA512 cc5ac49eaa3b8d304478b17d8309e68629af6e9c3fbc2dd76bc68d0e9f417d14fd235eb59c82037791450ac8278bc4685ac5afc3c0fe8d7e06bfc0adc264541c
- SSDEEP 98304:bwBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxZwBOBfKt5yLFxNTZB7ktTq8K+0:bw/tyd3w++lz0byZw/tyd3w++lz0byy
- TLSH
  T1E876234AF7951CF4E5A3E2758AA1450BE3737C563B3093CF2760566A2F232915E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  .Store
- Size 3.4MB
- SHA256 377abc9d367e61cb5c4761bf48dcfdf5bcd3822f303e0f972d7f4c8295a2ea79
- MD5 15596b41dba42cdcce4f677fbbc86b6e
- SHA1 1ed1e69e72028150f8562bff5ca1dd745874329a
- SHA512 d4e0d64f71027ecc6d85479542ed682359b37446cb1dccce5fa2972f152e27f3cb91a8ec0dc61270bc40038751a58982d4678efb929a3bc6d3546e072f51a9f2
- SSDEEP 98304:HwBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxm:Hw/tyd3w++lz0bym
- TLSH
  T1CDF5234AF7951CF4E5A3E2758AA1450BE3737C563B3093CF2760566A2F232915E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Swift Executor.exe
- Size 3.4MB
- SHA256 377abc9d367e61cb5c4761bf48dcfdf5bcd3822f303e0f972d7f4c8295a2ea79
- MD5 15596b41dba42cdcce4f677fbbc86b6e
- SHA1 1ed1e69e72028150f8562bff5ca1dd745874329a
- SHA512 d4e0d64f71027ecc6d85479542ed682359b37446cb1dccce5fa2972f152e27f3cb91a8ec0dc61270bc40038751a58982d4678efb929a3bc6d3546e072f51a9f2
- SSDEEP 98304:HwBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxm:Hw/tyd3w++lz0bym
- TLSH
  T1CDF5234AF7951CF4E5A3E2758AA1450BE3737C563B3093CF2760566A2F232915E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral3