72012d3cf78ffdef9e83a7dc6d2193dcf6c9312857bb62e52849b8ecd1aff7c7

General

Target
orchestrator_platform_qa_2.5.zip
Size 571KB
Sample260622-r1plbsdv2k
SHA256 72012d3cf78ffdef9e83a7dc6d2193dcf6c9312857bb62e52849b8ecd1aff7c7
MD5 8cc6df6341755ed25a535a13e6cee988
SHA1 430795b561375374fab547fc7e28526250e71c6b
SHA512 c96e3e8f2006977a26fac3a7e289a4cef21e9fd810c8785fa24207e78af3638172e564e9b547c48a1c110836d7a740cc81fc77e39feaad73ce96e4a2cd74561f
SSDEEP 12288:Qb7TqKR2IkSlQZALUMF2G5SLjrlFlU7ecTUNZhmbs2sYbl7q:m7fkSlQZAIMF2SSPrlFYTU3hVYbl7q
TLSH
T121C423445C187B6C3AF6A0FD2AB65D83231E1DFAF4D23DBEA43484FE1C16264A18587D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Malware Config

Targets

- Target
  Application.bat
- Size 25B
- SHA256 c3b56d68c80c4a6a9879c45a7761a538e3546644623af1ee469d3b70130fa0cd
- MD5 b29ca06594eef6945f1d82065a63ed79
- SHA1 6cdd56c58144ab0a4f6c8e5afd95fc836331ebea
- SHA512 d43aa7b0ceadfa16db4a5612cc5baf8cfea070bd3d28b472f6dc8a166790c221fb582752c6a377bc107956db5130b588ff75ade80469e0650dd3fad462cfa686
- MD5 SHA1 SHA512
Score

6^/10
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  tree.txt
- Size 301KB
- SHA256 a93ac4fb3f9dadc22f7b7f1877bc99b84a77fe3bbe560bdd20bbd7c4b6f9c1d6
- MD5 d1406748b220a6b0351a99654bc0bc78
- SHA1 8d20441c8fad5ba9dc1db96c27f77eaef542f091
- SHA512 0fabc0683d029a40572b27d758840cb01c082473ac23c1dce1ce26a90f3772e0ce1e9a8fb9db09ad91f3ea12b76105b99520bf3db06372afa7b5b5d7b32e4da1
- SSDEEP 3072:XbsRMCYd88VyjbynCX9QZ5sSFueeP7nKyNdpcbc7yxjJxCqU+VhZ9l/T7FcFitCl:8zH8sGa7eT2uLnsl5z
- TLSH
  T1AE64E6D062880DD2DABB86D2FD628CF7557764F14B8D2A8ECF5DF4E03290284D9DE846
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  util.exe
- Size 852KB
- SHA256 d56213d08fb10c880f17e1a262bf1176cf234d1fc591188171e7be9cd856eb12
- MD5 28982b102618847a69e409e0ec85e927
- SHA1 589f7ee45aa300878434093363ccca3ca156a2fe
- SHA512 ef2fd47de4fa9e064962b6c0c9ecd6a0efdaf57f1435f037abf11b9e72b653ad282df7229024b55960ab946f093cfbbb343ba4d98b0791224b0eee837ec226be
- SSDEEP 12288:O628L2HCSGt4FMz4+PUlv2kyK5yB1Tazo/UCjTMnvKdsoFwhiHBjBZoC:j2HCSucMz4CYbV5yBtaziU0TcSNFPhL
- TLSH
  T1DE058E59A27401F6D9A78134C9569A4BD7B2781607205AEF03E06BB73F37BE11E3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

JavaScript

1

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6