f9e44d4a09cec0f9fc7e060d2b1aaa883bbbacf83f852a5bcd9886168775282f

General

Target
rta-tradingview-vcp-reference-v3.1.zip
Size 533KB
Sample260622-rzbcbadv2t
SHA256 f9e44d4a09cec0f9fc7e060d2b1aaa883bbbacf83f852a5bcd9886168775282f
MD5 9c9ef26b77f96c782dd7d4e2982a4f21
SHA1 703d36699e265d8c3f7317502162a34aa98bdbef
SHA512 6e6cf5888dec3014b05d8cd00708eb5f0d69aa8c3a827746393ac6482e60acdf0924e622256628ab98cb3e80b3772056b43963d06f0e2a0b0b3a561fc753b412
SSDEEP 12288:weCEhtM9qO3g/ALyYG0ZaDajTCXMO8xzDOeQako:XtWA/f0Za6TCXKBxl7
TLSH
T1E4C42367226F72500DFE92ED4E4156186D3D8E322A00A6FE55D8C9CE8719F0ECE35E8D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Malware Config

Targets

- Target
  Launch.bat
- Size 25B
- SHA256 b54ea465f77f1eb726d3244aa52d13c103ad9c4fc5a15061b7067347896b433c
- MD5 7f8763a16a923fc1a188fd04dacbfaaf
- SHA1 0aec3fdd44982b06ac84c51a74ad353156909e33
- SHA512 e84da911832044ab8a46d4fc3e72d7c3ed91ff3d904aba64abbf63b51c1f2e4d3e4c7bb73d93218d1a24b1a600119a6600136eab5ed4f2b230773236abf5563e
- MD5 SHA1 SHA512
Score

6^/10
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  license.txt
- Size 301KB
- SHA256 357cd0a1601d24bbb7949637b352b0ace1f30f51f788a03cafa98316068938e0
- MD5 1770fcdf879803a04811686ef260c7cc
- SHA1 47cf529da3eabf5298ce8a22647470391ab0870a
- SHA512 e13a19c73784083d59ef2a0a68d8b11551761000f5cd5633379c00fa37efda12a9b756d122e5a81d5e739e1faf59f52f6fcf54529542281d7b2be571ad1e1d23
- SSDEEP 3072:BVk0ZXKS3rMorXHuyWXsOO2nYwcF1jUXvtGnuJHmKM6VTK9XxYXLG3KOMh3ClfwZ:BV7z3pjOVX3OZTEQBQTK9x/3iSptzwVn
- TLSH
  T1196406D0618404DADAABC680EC325A9A33B72DF1470F1A8B1F5CF5E4B78119DD7ED826
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  unc.exe
- Size 753KB
- SHA256 30694a0101abfeea642cb9de7fb7eb66789eea74d8d7257b39822d7dab59445d
- MD5 c1317f7281ff9d56daeb7fae01acbdbf
- SHA1 3ede36c1d7afdbdba58f2e7a69e679ea85d1bec2
- SHA512 8e80b5a77112e85fc778f4ccdc7a2097a0b4905c0ba149b0475d9049a8cb150603f50acbf8150c3579c301c7a3c5470cb5dd9ae8c4eb9a3453ce2abccd8b700f
- SSDEEP 12288:0Ixb6mgscIPv+xPBPx3ph7WfsnE6VTdUZ9nUt2ZvIX/19X7BroLkLwqG:llRcIOXrh7dEiTWZC8gXTFD
- TLSH
  T141F49F19FBB101FAD5B78135CD16A90BEBB2BC050624566F43E06AAB6F377210E1F325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

JavaScript

1

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6