2dd25323171ac92ccd6151b84a3e82ca90a799d402a8bd872571dcae6118ee7d

Sharing

Copy URL Twitter E-mail

General

Target
rd.7z
Size 15.8MB
Sample260619-x4seaaa13k
SHA256 2dd25323171ac92ccd6151b84a3e82ca90a799d402a8bd872571dcae6118ee7d
MD5 e2b65ae387230e881ab6e59eea29b565
SHA1 4d4617446bf42e4a6974bc1ff07b7846f1275e83
SHA512 02bc3c6bdefc0807fb3c81c8902f01e0c69a9dd7dcb81120c50c5a916780ca0cedd57e1be1d6112bfbb5a1d9f2f995cc161d9634184cabe78f65a11bfa38e2c4
SSDEEP 393216:HI1hOxu4mcOoJLyJaN5PlQLKVeHi0wobW2WqV4Cy:HnDJL1N5emVeHiy0qTy
TLSH
T108F633468585A497BFCD21E8CAB3CCDA237F38A55894935F14F25DE1E81ACCF7D22890
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  rd/nh/IP配置请使用我.bat
- Size 840B
- SHA256 69bb12bc393902ccbca1e1f8e01cfe7de3946a2f63b5b15d8be1bd868cb74092
- MD5 146d009a057a68b0b108a6055e518cd6
- SHA1 48091daf83d7e968072308c7962c487f453b352c
- SHA512 ed333dc19c563f72c325043de9658ac26b9fb9fb640212fa37c6729496036d89d82ef8b571e667dc399e7e1275ba15ef023041ac0fdca0b88f0025ea91c5eff3
- TLSH
  T192018953740D952290F00D02EBBA403DED4DB9C34389BC09782B416C6A867967FAECAD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  rd/nh/leechcore.dll
- Size 10.7MB
- SHA256 4897c8e174d6c3466d656e871eaba608e5f50150be607b22740e14888723e4e9
- MD5 8f6eaef42402e4b0711970a42addc15a
- SHA1 951f0eed50de570f42a8943b37f615098b017102
- SHA512 7c3c311b96c52b65d12624ee9df8e85f7ce3caef5de134d9ba88fb54c9d3642140d9538ff5b06497540724cde24c10fc30b7e49262e67fc2be59236eaf925d69
- SSDEEP 196608:jDS6VV4Mpvv/p8RDKvW+vxqXGLa2Vm0Kwl/dMHZnJL9a+Lu:jD9pvHp+DKO+vxGca2I0KwllePaMu
- TLSH
  T18EB6E1BA3F89C6DDE103DD34835B6B3A832F667E474B32D39920C828655C5E6993B4D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral3 behavioral4
- Target
  rd/pro/IP配置请使用我.bat
- Size 840B
- SHA256 69bb12bc393902ccbca1e1f8e01cfe7de3946a2f63b5b15d8be1bd868cb74092
- MD5 146d009a057a68b0b108a6055e518cd6
- SHA1 48091daf83d7e968072308c7962c487f453b352c
- SHA512 ed333dc19c563f72c325043de9658ac26b9fb9fb640212fa37c6729496036d89d82ef8b571e667dc399e7e1275ba15ef023041ac0fdca0b88f0025ea91c5eff3
- TLSH
  T192018953740D952290F00D02EBBA403DED4DB9C34389BC09782B416C6A867967FAECAD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  rd/pro/leechcore.dll
- Size 10.7MB
- SHA256 3f73593e302b02f17b4abd41e643efc3fabbe99a95c24661febbfff85641b406
- MD5 d5e5986fe113316e7744a6e361704a56
- SHA1 bc2f234f35432405b6459bb4679d1fddba4f64f7
- SHA512 3a73bc05381baa38bd024baa0540a4865e2524c6eea881fc82a304cc3a3699864e58a032fa83d1712b99dd6e41319572ebe87cbf9ccd392049e36960c78b47a7
- SSDEEP 196608:A7eNHUeKVj3j27Qssl+kWtWLm4h4SNlWL/vWhhMBjop7XKgEvmI:dN0eKVj3aRs7WtWL+SSzvWuop2J
- TLSH
  T1D3B6F10638FDD038DA748BBD59AFB9B573B5FD0C07941ADB5A09D2A5BB992E8003C710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral7 behavioral8
- Target
  rd/主机每次开机运行一次就行没有提示.exe
- Size 2.1MB
- SHA256 4042c9bd838ad6d06b07dbb08fd2acc3cf478bdcfd7dbc069d221a8478ea17af
- MD5 9b54f7624d21f1dabbe642638970605e
- SHA1 64e7cc47bcb4e6e3640e65a6fb8b0ac14fa3c747
- SHA512 b18f3f71b185bfdcc44f294309e523f83e78584ae23b712f91e18532994c5477c4359e3c62f8e0339d40346fed37b98c9230c708ea1230e086ab2cd29ee5f720
- SSDEEP 49152:WckckqhK1AxtvXFz5L2WF2xO8D7zqR4mSqmrWU:NLd19SShK+8rr
- TLSH
  T14DA53381B6844EB6E317CABF998797A93D6D31C4CF1052A72E1172120D6F94F0A27F1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Badlisted process makes network request

Badlisted process makes network request

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10