fe8c4da8e495d6dbe4ac5c88a21714f9a96409c06a8ba96272fa5365411acc02

Sharing

Copy URL Twitter E-mail

General

Target
ful.rar
Size 14.9MB
Sample260619-vslfgsa17s
SHA256 fe8c4da8e495d6dbe4ac5c88a21714f9a96409c06a8ba96272fa5365411acc02
MD5 e0250aba39b69d34812b2f99050d3286
SHA1 9102241374dffed20fe705d48afd227f7b43d88e
SHA512 b80bb5cbeec98b63ac35d3d4b021f119bb8403a2f5770f3d9e2cf879ed78d8a68e50cb71e025d396c099f3017ecdcb47fe88d24ac6dc6957f560a321a175ec56
SSDEEP 393216:y3V3BZT8m8FK6iK4IQc70J333gOcwwm0mV7Fcu8w2:y3V3Pwm8FKFK5Ql3zxF7Q
TLSH
T1E7F63339573C40B7166AF825E709DD91F49C4F23C9419ABE6E67218238B314361FEEB8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  ful.rar
- Size 14.9MB
- SHA256 fe8c4da8e495d6dbe4ac5c88a21714f9a96409c06a8ba96272fa5365411acc02
- MD5 e0250aba39b69d34812b2f99050d3286
- SHA1 9102241374dffed20fe705d48afd227f7b43d88e
- SHA512 b80bb5cbeec98b63ac35d3d4b021f119bb8403a2f5770f3d9e2cf879ed78d8a68e50cb71e025d396c099f3017ecdcb47fe88d24ac6dc6957f560a321a175ec56
- SSDEEP 393216:y3V3BZT8m8FK6iK4IQc70J333gOcwwm0mV7Fcu8w2:y3V3Pwm8FKFK5Ql3zxF7Q
- TLSH
  T1E7F63339573C40B7166AF825E709DD91F49C4F23C9419ABE6E67218238B314361FEEB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  ful/cye at bu klasorun icindeki klasoru/pewa/configs/default.json
- Size 3KB
- SHA256 1e10c7f84f2692ba02e4e37796c63a4b0ceafdb66d703d2afcdba802ce779319
- MD5 827ee5659d04b9ad0264bbfd96ebc8a3
- SHA1 1d5fe384f96b76663080b71624ddfea997258cd3
- SHA512 c789052ac8647f23fa106851e3864a510a8bc6bff6000de5d4d1cf06612ab2a7157ed8ec46718bbd8bbce583039eb5217c9c94e5580899cfc885ed05a2c37615
- TLSH
  T13981B416E4744DF260EAB4684DBE32076A7097A74D5A3C387E0C421C1F4D62F51B6BD3
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  ful/cye at bu klasorun icindeki klasoru/pewa/pewa.jar
- Size 399KB
- SHA256 fae6be70ee9b897584e607d21c68fcf6d36073b24e328a8823af08f4e95b0ba3
- MD5 80ec5b0945e1245e54c3d6fcac90b598
- SHA1 a80d1535cdb0005f435514d80fee3d8814830794
- SHA512 cb2cd21c30f4e30e36c404daa0aaac381fdfafaa6441642d414aeecb175ac3a66a15ed70299ff31977c4fa9cb8c6ddb2e3120c3e170b19a52227caee2a03a1d7
- SSDEEP 12288:olKKTTtFxVliBTT/f6qPLVOXlwouxvbmzfqEYxucbp:oTTT9jiBP/fXLEXSLxvyzfqNu2p
- TLSH
  T11E941226967EA930DE63E331D191DB0B3C6F26CDD80624371B6C8F6355BA9823B1DE14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  ful/source/apache-maven-3.8.6/README.txt
- Size 2KB
- SHA256 02d480a04c48aecdc4ecc873bafe545b4b514e8dae04761b0f23ef3d29b83c30
- MD5 8b7f504909d79405af7bb91a342c30a2
- SHA1 6780db87abcb0b1c7fe8564871ba9639f54c3d0b
- SHA512 f92fa8d69b2ee67c05d80d9f6e89f179366592e4daaa9d80ef791b22731e39a2bf930412e700099644f385c505bed406a8c6c2854fe31b3393d977119c737105
- TLSH
  T1C75163BB1D4541352339C647BA2A674FE333C01F68D611253A9D5819C732A5B03AF64D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  ful/source/apache-maven-3.8.6/bin/mvn
- Size 5KB
- SHA256 464159d2d22c3b161419fc649dae34ac2f6f0b9367175e57fec5b8120f725453
- MD5 969cf4e452f058e5e56f1a89ac89472c
- SHA1 91cade421bbf84be8a0876829af05b754ef5162a
- SHA512 91ea616e12b91bc29803b4e0196498a9be283460ecfefbfa50ec6d9288f412fb6965fa0646471c3100b9dc7e38e74db3bc3e207182abc99b4eeb772e3958b5e1
- SSDEEP 96:wQHLWo7HSPfYja/wkhCv0snHOMGzmTppfweHAMMzqkp74E421HMUXDlhrLk+ELXu:dWo7Hb+Cv0snuZ+AegP954E421s4vE+9
- TLSH
  T1FDC186BA2CA407B254A1CAA03B0FAADDD31562BF47446510749C770CB3B460EB2FF65E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  ful/source/apache-maven-3.8.6/bin/mvn.cmd
- Size 6KB
- SHA256 2efbb074959f185835d3dfeb14d6d51dc2e78cfcd19d03e5aa50ecc1218bc154
- MD5 6ed6ad40c7a882291266e459d08a1763
- SHA1 e2b32b54b60e9b9a82e71e0144d2c0de89974d96
- SHA512 16ead912667bb8e0f14e79b8ae3db388216404ed36957b7b5ce78cc96db6f2f05030400a49d56ec445450a3a92863b2b08d21a913646ce59c1aae0c0c7e844f2
- SSDEEP 96:5Q/n5DH2HQ5dme/nTHVbjpEegxicE1+W4NGIlcQcFG5NMbHF2rye/pVH:c5DHwenTHhieyvBNGIqdFG5ybHfe/
- TLSH
  T192D1B7E71D692E6764F2CAF2C30C26C8F219E5A513496318306DD269263F50E06DF9AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  ful/source/apache-maven-3.8.6/bin/mvnDebug
- Size 1KB
- SHA256 549c72c1fca6c993ecb4ee9e26d3dea73f1f738447f9ed5ae270b194d4a5a01b
- MD5 6f3626dac2bd57833e45884974aa5355
- SHA1 d372afea471e90d0ae683e071496e487f52f794e
- SHA512 b3066774d9c11b7265541c36453f352a25a0cdc6f92cd842ebb234952b5c9873aecc266c855b47a5fb1d3032b50ddf0f860cfeccdb38f46edcb05a1cdab56c11
- TLSH
  T1663140BA2C16362A1298CC92AB1EE0CBE356C39406065224349CC0891737A1345FFDA9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  ful/source/apache-maven-3.8.6/bin/mvnDebug.cmd
- Size 2KB
- SHA256 e7e787e99dcf93d32f53d8b94dd37a87f3d22ae913ef8570b9335fa4f0d02ad3
- MD5 7ee08dabd981dcff82d52382db966554
- SHA1 eb9ab8cf81c7f2ca49157caf45549243b57d700b
- SHA512 3fc59218de4275f91c04156e382259e6fa8eea02b4ea2a31214a504a348847314b8fb167e42681d25be559e7ac5b9ff28bf95e29f96fe9dc45ad0108e85ae505
- TLSH
  T1444123BF1C223D272193C4B26A1A9352F25AC39C02429224355DD5981F7F50E81BFD77
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  ful/source/apache-maven-3.8.6/bin/mvnyjp
- Size 1KB
- SHA256 defa1cc9acabc91135f164301e1ba9ffe41b3f5f07c9e2c3ebeb36aa7da054a2
- MD5 ba2c47dbd76b4262a28c60e529a3bcea
- SHA1 f782bf7e00985659072aecb945b66b413b9d3cd6
- SHA512 b7edaab85ea1f8ef29f32b60e96cc8e0967c0d208b20c2e077b1c72a72393b9bfa04de66378c5b8fd767753476b7ad0aa4df0ef936d238263321182829f2f137
- TLSH
  T1C43144FF3C091A361794CA95AF1FE48FE655C3981A4A2275208C80D9133760A55FFEA6
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  ful/source/apache-maven-3.8.6/boot/plexus-classworlds-2.6.0.jar
- Size 51KB
- SHA256 52f77c5ec49f787c9c417ebed5d6efd9922f44a202f217376e4f94c0d74f3549
- MD5 67e722b27e3a33b33c1b263b99dd7c43
- SHA1 8587e80fcb38e70b70fae8d5914b6376bfad6259
- SHA512 6a58048d9db54e603b9cfd35373cf695b66dd860bec878c663b4fc53b6b3d44dd5b0c92e7603654911b1f78e63ef277cf6b272fe069a360989138550545f274d
- SSDEEP 1536:ODYbAtmK4TiLSQcOByAHia2KGcpTdC32oSkL9ch:ODNqTCBZ9tGoTdC2obL9ch
- TLSH
  T138338D15EB918FB9D22386FC01899F33B54C81889245629739E82B5FF4BED0627835DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  ful/source/apache-maven-3.8.6/lib/commons-cli-1.4.jar
- Size 52KB
- SHA256 fd3c7c9545a9cdb2051d1f9155c4f76b1e4ac5a57304404a6eedb578ffba7328
- MD5 c966d7e03507c834d5b09b848560174e
- SHA1 c51c00206bb913cd8612b24abd9fa98ae89719b1
- SHA512 fa769a08a118141831cd4eaf2ce4f3f65855b8aeee86fbf3e07b4c619facf801f8b55c14c5e56a154cd14f438a8f120bb59a20c1b6be04979501e362f252ca48
- SSDEEP 1536:RLWqDPQjDK24a9f3m7Dds6ExXDnAsns3R9:RLWqmDK2HhW7DsEss3R9
- TLSH
  T18633CF24F5C44411F35B003B87BBAD0E343BAFA8854B669925FDA74A57A4D4B8F03BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28
- Target
  ful/source/apache-maven-3.8.6/lib/commons-io-2.6.jar
- Size 209KB
- SHA256 f877d304660ac2a142f3865badfc971dec7ed73c747c7f8d5d2f5139ca736513
- MD5 467c2a1f64319c99b5faf03fc78572af
- SHA1 815893df5f31da2ece4040fe0a12fd44b577afaf
- SHA512 4de22e2a50711f756a5542474395d8619dca0a8be0407b722605005a1167f8c306bc5eef7f0b8252f5508c817c1ceb759171e4e18d4eb9697dfdd809ac39673f
- SSDEEP 6144:ClZm4qm32yRelujRZGdsTRVuL4lKNB5iwfRYRW:C0m3BFVZSODuL4aLfCA
- TLSH
  T1F724D1A3FAD08815F24294F2F6A671AA383EB78ECD5714DA11DC79439D61C054B83BEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  ful/source/apache-maven-3.8.6/lib/commons-lang3-3.8.1.jar
- Size 490KB
- SHA256 dac807f65b07698ff39b1b07bfef3d87ae3fd46d91bbf8a2bc02b2a831616f68
- MD5 540b1256d887a6993ecbef23371a3302
- SHA1 6505a72a097d9270f7a9e7bf42c4238283247755
- SHA512 fb0fe98385496a565678a000c26a3245082abfbf879cc29a35112b4bf18c966697a7a63bb1fd2fae4a42512cd3de5a2e6dc9d1df4a4058332a6ddeae06cdf667
- SSDEEP 6144:h11F71otL3cYm88mtAoexlWzRrP8Dpj/u8B5afiFRIC8nCLAMH+tNx90frmXLfT7:hN+hm8aXlWtPwj/4iFqCH+t/+froTVp
- TLSH
  T1C5B4C026AEC44110F20B40B181E674862C3E8FC9D587B5EF6AECB74B88B4D864B57BD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32