ee01a35abf60587a6dc144186f4d451b006bd33812be742f1dcc015008afddf1

General

Target
uzb_rockyou_v2.9.zip
Size 571KB
Sample260622-ryvpkac18j
SHA256 ee01a35abf60587a6dc144186f4d451b006bd33812be742f1dcc015008afddf1
MD5 d0b0279e42fcfe1645bfd2ae6ef80703
SHA1 3429307d9f7caa0db6f92ce0021b115842a7be7a
SHA512 141b48e6ea4f5a23c242bbb1dfc8658769f4f5b96f12c2adaffaed24300d884cdc5a1f2704b6470d27dc105896e52dea1ef87c371386e34c131d7bc838c9f04f
SSDEEP 12288:Ib7TqKR2IkSlQAALUMF2G5SLjrlFlU7ecTUNZhmbs2sYbl7n:+7fkSlQAAIMF2SSPrlFYTU3hVYbl7n
TLSH
T12CC423445C187B6C3AF6A0FD2AB65D83631E1DFAF0D23DBEA43484FE1C16264A18587D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Malware Config

Targets

- Target
  Application.bat
- Size 25B
- SHA256 c3b56d68c80c4a6a9879c45a7761a538e3546644623af1ee469d3b70130fa0cd
- MD5 b29ca06594eef6945f1d82065a63ed79
- SHA1 6cdd56c58144ab0a4f6c8e5afd95fc836331ebea
- SHA512 d43aa7b0ceadfa16db4a5612cc5baf8cfea070bd3d28b472f6dc8a166790c221fb582752c6a377bc107956db5130b588ff75ade80469e0650dd3fad462cfa686
- MD5 SHA1 SHA512
Score

6^/10
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  tree.txt
- Size 301KB
- SHA256 a93ac4fb3f9dadc22f7b7f1877bc99b84a77fe3bbe560bdd20bbd7c4b6f9c1d6
- MD5 d1406748b220a6b0351a99654bc0bc78
- SHA1 8d20441c8fad5ba9dc1db96c27f77eaef542f091
- SHA512 0fabc0683d029a40572b27d758840cb01c082473ac23c1dce1ce26a90f3772e0ce1e9a8fb9db09ad91f3ea12b76105b99520bf3db06372afa7b5b5d7b32e4da1
- SSDEEP 3072:XbsRMCYd88VyjbynCX9QZ5sSFueeP7nKyNdpcbc7yxjJxCqU+VhZ9l/T7FcFitCl:8zH8sGa7eT2uLnsl5z
- TLSH
  T1AE64E6D062880DD2DABB86D2FD628CF7557764F14B8D2A8ECF5DF4E03290284D9DE846
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  util.exe
- Size 852KB
- SHA256 d56213d08fb10c880f17e1a262bf1176cf234d1fc591188171e7be9cd856eb12
- MD5 28982b102618847a69e409e0ec85e927
- SHA1 589f7ee45aa300878434093363ccca3ca156a2fe
- SHA512 ef2fd47de4fa9e064962b6c0c9ecd6a0efdaf57f1435f037abf11b9e72b653ad282df7229024b55960ab946f093cfbbb343ba4d98b0791224b0eee837ec226be
- SSDEEP 12288:O628L2HCSGt4FMz4+PUlv2kyK5yB1Tazo/UCjTMnvKdsoFwhiHBjBZoC:j2HCSucMz4CYbV5yBtaziU0TcSNFPhL
- TLSH
  T1DE058E59A27401F6D9A78134C9569A4BD7B2781607205AEF03E06BB73F37BE11E3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

JavaScript

1

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6