ad412cbe5d3d3804ea6208dfb4be8d8a25ecb94d62f46bc5a9aa8fa0f2f647c9

Sharing

Copy URL Twitter E-mail

General

Target
icecast_win64_2.5.0.exe
Size 5.3MB
Sample260625-v8f6psd17m
SHA256 ad412cbe5d3d3804ea6208dfb4be8d8a25ecb94d62f46bc5a9aa8fa0f2f647c9
MD5 ece7bb35cd279883a3947fa991258e7b
SHA1 82cac14769c062fd4095f2dc42bfc10d1b518398
SHA512 a52d09bba32e3e2462ef64176f21fdac8820092792b9eddfb39caf666378fab2e58f7e0d07a4deb7871faa947ec4ddcdad4ef54be08fb0ac454fa7498a8fc234
SSDEEP 98304:g7I5jF62TefSHQ0KKNwfiXmuwPoQGyi7y6CDgApEuV06/GbrMpUdCvyx8:9FNg6xKKQxPoRP7NCD5HV0GGPAUdCv
TLSH
T17B46330A32C76DF4D641103D5F56FEFB1407CDFA15E78B8AD94123329DBBA9287180AA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  icecast_win64_2.5.0.exe
- Size 5.3MB
- SHA256 ad412cbe5d3d3804ea6208dfb4be8d8a25ecb94d62f46bc5a9aa8fa0f2f647c9
- MD5 ece7bb35cd279883a3947fa991258e7b
- SHA1 82cac14769c062fd4095f2dc42bfc10d1b518398
- SHA512 a52d09bba32e3e2462ef64176f21fdac8820092792b9eddfb39caf666378fab2e58f7e0d07a4deb7871faa947ec4ddcdad4ef54be08fb0ac454fa7498a8fc234
- SSDEEP 98304:g7I5jF62TefSHQ0KKNwfiXmuwPoQGyi7y6CDgApEuV06/GbrMpUdCvyx8:9FNg6xKKQxPoRP7NCD5HV0GGPAUdCv
- TLSH
  T17B46330A32C76DF4D641103D5F56FEFB1407CDFA15E78B8AD94123329DBBA9287180AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 11KB
- SHA256 2faf21edeeb13d1a8a7a7777d144d3f45cdc40241ff8838ce813f83db0e5dcbe
- MD5 d44825ef0525a40be9c1d8c1cd4a8ccc
- SHA1 6f795d6c9fef049cd0e58a129b8e55d2119b5bfc
- SHA512 ffa6fba0fd9e8fa2cf0afe0817985eba3d1b81b01fcbe67fe7a8c42fdbcdd552975c11cee50626aeb64e338fc8e3f1d36ed7d24279f1071be385d79519bb00b4
- SSDEEP 192:kRBTusyjbI05hbvNuw8Ykv/R72xDObJ/:eyA0DJuw8YkvF2IJ/
- TLSH
  T1CB3283297F4B06F7D9B34538405BEBCF1627E560E92F4E49D7440909FEB62B1580E386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 24KB
- SHA256 4aa54e53af7ca255020264af2afd372904241aa5351e13bbd040721140f49b03
- MD5 5de47989e8d215774b600c16cf9de9cf
- SHA1 920e53a320f6f57f306e09be7a7de0e3ce04a9ff
- SHA512 395e0fdf541319c8a1cdeaf0c772b26397f40298065f2b8e6df9096f98d497cdcc4d7128e402c773b0434dca5acd6639880bfab16b5cc6a89fa363870a0b1030
- SSDEEP 384:DY6AVKsq0jwxKGoanoGWXjJkxq1f3YkvD7eYuArgVMh:DgKNmwxKGowop2xyvDKYuqo
- TLSH
  T106B20718BBABDCF3D01244740DA7BB7BD5739B61563D83BADB6D8C44EC22790152834A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  Uninstall.exe
- Size 122KB
- SHA256 39375d692576cf48f7e6f583ac7e2565f8046a0c4baa60587e3a773882066f18
- MD5 79e38d8b12074e70407e9e1a00c35aff
- SHA1 ea45ac67c8657e68c97f57b8bed985eb7bb1811c
- SHA512 e6cb8ed40816ccd540da40e0ec631a8555cd25fec82f28f7103bb4e4321a986604f36f8d096cc0da424ecc71da7493d5e02886499fbd5b3b5aabb5ce5f846ed8
- SSDEEP 3072:zyC6iCbpZkRs8TQu8LQ2CLa5Uoq9pxceA3MOPaj:m5ios2C4kLm3MOi
- TLSH
  T15BC39E18BB568DF9CD6A04B04993FFBF0A3D5DB180A94B4BD7401633DC77AA0A63B191
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
behavioral4
- Target
  bin/icecast.exe
- Size 492KB
- SHA256 3a288fae33337855d3ccb9f36f13217d5ae99e816cc517e2993c4deebd03ad8c
- MD5 6cda3cb063fba31a95b0465a75c3655b
- SHA1 9f110ac0ecae5fa4445ce5291a2750132dd9a64c
- SHA512 35ea3ffecd775f1a28c777d4fad79ea65e68f55a4731fd4f1a6b759b5a9c0f908bfec6a123b73b3b627dfa896830a74bfe9b65eae269e2a727a8707acc78e19a
- SSDEEP 12288:YwfGDoNLNm5XN+EO0pN/uZKbcEpG5xOG1H1iMd:HfTNU5XN+Exp1uXxOG1H1iMd
- TLSH
  T126B43B27E3922AFDC56BC2348697A332B671F0591231BD7F4568C7302F60E605B7EA58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  bin/libbrotlicommon.dll
- Size 139KB
- SHA256 17d66a846cc19183297af235af2794ab650bd80647d42e268e029d643d513df9
- MD5 e9eb596669ecd13fcab7db0f5a5f783c
- SHA1 db1ff4e1affa8d23c99184cc43db4bf321af1793
- SHA512 8ef681197f16f11fab6d72a96fcf99cc2c0da904ce31b382d38c52ef394fad73f466fc3e87849bfea6ef2f85f62a8e906490c7b1d84d6bb64012b9838ef40313
- SSDEEP 3072:GX894lzbWhNbNL8DXGvVh73pbi0tdpvGJaoZB7PxBR:L4AhdNorGvHdbi09GJL
- TLSH
  T14CD36B61B3150737C22B627AE49A6BB9F335817493670521B4AC42BD24C3DA4873F7EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  bin/libbrotlidec.dll
- Size 53KB
- SHA256 22de9c3a04f6f7a2c5b96604f5443bf860e3a6d9de6126a6b8e3f99de1d0662d
- MD5 5066c0538c46f798abd8a2a1e525cfe6
- SHA1 bafdaf620847c1b0bdf1b83a4f1a704af661b30f
- SHA512 62328a7278ccc71f95c11ac27ac90d35ecf4e3e691118422c82bef4efa6479e788b2d79dc32eebea224a7d8fd88af0f7b30a2b2dfa28e2da54d5ca35d74499d0
- SSDEEP 768:2REnLTLvrLb+LALqL9qdzIpvxBI+7E08V9EgJVyNekA2mazQxARbYs3J7RKF3r:LrDZdKm+g0K9EmyNekA2NJkF3r
- TLSH
  T10D333A2373A39C9DDE57C1388BD7E773B73ABC1413A8A7671084F5312E12A206F99468
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  bin/libcrypto-1_1.dll
- Size 2.5MB
- SHA256 dffdd2c5f385eae442e9df129789bf1c4dfc267ad98f3b3467448434e58d1fea
- MD5 b7886d09ad5e9175f00d90718b295ffd
- SHA1 d099c7b2146c9a3ed8045aff3a768565bbff7c34
- SHA512 cdb59a421d1f750df8b53ee8a776d2f6f2a5e87641c0914e38857a2b35894e06f975a32649f816094d538f7dc9a090b75d4706b197aaaddf2581a87fe567f235
- SSDEEP 49152:XmVwAsOvn6DNuxgQL+IU6iQM48sutLfzND1GtlqYN9SJdhz5qBfy5fqKvF21CPw7:tDM9+QM48s4LlQN9Snqw5fqd1CPwDv3f
- TLSH
  T136C57D17F1A318ECCA3BC17086279772BE31B8651770BE7F1554DB302E92E50176EAA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  bin/libcurl-4.dll
- Size 826KB
- SHA256 0512eccd6244fc37edd31a7f47ac8a9da49587ee576c0577236f4afd8e150c74
- MD5 aa80a342c2ddaa6010c9664de8eab1d1
- SHA1 a9f990afd004cee45416030277d57b944c463731
- SHA512 18638fd8b1567ae7cce60e2bb8d225a1af43119806f9e93a679e6a0520f5dc14621142a8532ea69c2dbdf9cbba6b3d9794835832d5458ea96b681e168530fdf4
- SSDEEP 12288:2OXnp90pewXivQmlMyK0qLEglw6Jli7nRg0YZtYsUrpUdWBh:Dp9qIQVyK6qiDRgTtYxrpUdWBh
- TLSH
  T1AC054B27E2A324ACD26BC13483A79772B531F8661131BD7F1A54DB313F50EA0673EA94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  bin/libdl.dll
- Size 17KB
- SHA256 247c6c283be1232db1771fa835bcfdae70b91d57f6b5def77fde55a57bb33bb4
- MD5 f125c0bc8bf7b1335b91bf74263d40e9
- SHA1 1f49d274423ef433a714e8ae26d3c0cd8207552f
- SHA512 0457948ed0db4a90c6d824d004486855893bfe60ffc5d4b210d9ca778c6f7bc79b59155ce35918037748e494de5ec158d64ceda87a24ca0953b68f6b0d52fbeb
- SSDEEP 384:FJ6yTPl+jFImVKkua3Txx26NGNyy+DMvdy:F/bl+jemokrxXkMedy
- TLSH
  T18582E826B3D65DEEC50AC33880E26735B7B6F82103264F2E061CEE361F20B547E39589
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  bin/libgcrypt-20.dll
- Size 1.1MB
- SHA256 42157d9d66b8e9ab5346c124e43dda2b8d854359a7c4fdab1d2f41d9581b2756
- MD5 d3d78e4d71bac77868750ed55285fb9f
- SHA1 cf6c890b4a1a86774d98dde977363fbe3ad642eb
- SHA512 11a82f76eca22b53bc2cc9edcc8ed61bc6cbbc4c434267d90baa81a3fef791a06fa4f496fb7204942e412547ddda4de92bd9aa087484c53bd002a4d7bc57a7c2
- SSDEEP 24576:y2jo7m8nyYChUdQpbVUgQqVS/dwhAkGre:y2Sm85ChUdQpbVUOvykGre
- TLSH
  T102358D47D9A2246DC2A79070CE761A73B436B49813F4BD7F0191D6713A23FA0639EF98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  bin/libgpg-error-0.dll
- Size 201KB
- SHA256 95fc2ad9f48736b95dc5a5d743935a365ef01e60ca030646465a84e7e79f2067
- MD5 13eb265391d21ef3da32c3e8aa80234b
- SHA1 a9864b9273d904c9d20436b427df3e005e89569d
- SHA512 b101663c1e87bb615cac4bf7cf7bd4e8c6f4ecddb3ab8bba2eac5d54b4e30853e9b45b67e9e24e54f2ef023e0826f8f5ee1157c1b2ed38ad8352086c151b1a15
- SSDEEP 6144:avYQwBFcArv/oa0zl5Vf1JJKDo7wv+fJdC8NkUY:awQwjBnoRxS8NkUY
- TLSH
  T117145B27F3931CBDC953C6388AE79375B431F8210274EE7F1518E7706E21E6AAB2A514
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  bin/libiconv.dll
- Size 33KB
- SHA256 6fd60b13707526dee6fea71e512aeb85a043f8ca976aeae6a67a43f9e800d6fc
- MD5 43accf07575875e71116879caad2ad4d
- SHA1 c8fa5494f94c1cb46c9ba1d54a768cb58be1237c
- SHA512 0e6a99ddae513759ae85a2d9ae248b5306db3a662f406eef0d221dfbaf6cc9b771a28b560dfd4e2043af9cc1cd79730959b992a537712ceaedacd33e06f8ff56
- SSDEEP 384:up9e2A9v2AYBBSwn3OJkuaXETi1oS+A1MCCrSfDM6MBfWkjrrJlPMRsstIG3nP:/V98Sm+k6Ti1T+A1BCroDMjhctz3P
- TLSH
  T1E7F22975A2D10CDEDD47CE3845F21B717430BC760613EB6F2A2CEA715E32EA09728986
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  bin/libidn2-0.dll
- Size 340KB
- SHA256 2be17c0213031834fc52a55ceff22d2118da015e9a2a16d0524d082172c84c72
- MD5 28ec4068abd21e8d9a725bc4fc1e1459
- SHA1 9149d3171d502d460a4d6b5977603b25262b8643
- SHA512 040093c2390b5b03843e67db1e28f5545a3c71aacda1c4732a33e7916235903f2ce20bc71c012a0adf48b1e2d9d8101e9158c7eb091f78e6b1f66a11c1f2bc04
- SSDEEP 6144:VkywzIvweyHJ7b1zhTqFLX7hcsDc3uURHu833Q:EONeO833Q
- TLSH
  T1C3740A42EAE6D4BEEE27C172A0934B6257937C611F53479BB71CFA9D6832ED00DD0209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  bin/libigloo-0.dll
- Size 97KB
- SHA256 3987443b966db1b86ad3e1f06993726fe9606007c04479a2e0db4aab4726b923
- MD5 00053edeec3bda1829baf70ce54bf5b8
- SHA1 4b3a3fa1b56c2e92297096ae5c3e2430b3d837a3
- SHA512 888bdd712f17a268353e1a82f815fed38b27359f1f2ee669e18656716d00153c50eb3b361894a921503778312967869cd3ce17222c1f5a0d4c02206e0461b567
- SSDEEP 1536:vK1699tEHBKuR7hdYp1gNkBmlno7HJJdjcJusBbLf2AiSi8DmD:vKO9tUB1bOynsLdjcJHxLuA1i8DmD
- TLSH
  T1A3A34A1BF2A299BDC54BC27884A65371BD32F821002FBB7E1758E633DE10E509F6945B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  bin/libintl-8.dll
- Size 90KB
- SHA256 8bca19369a3dc0add66cc4cfbb4ce5fe56fc17b71f5ee3d54185814ed5fd44d3
- MD5 dae24fb9e282aa5dcb56ba93a365d74b
- SHA1 fd36d8da466409a51ee759a0d7c294ea6efaefff
- SHA512 b6d0b252f3503df7ebd4f9bf0e7a29d896ae0d20d86150f79c9550adf99ca68e617936f0a0589b81a1a56404bbd873443cc4e94124a615b8aff2899aa8ea7041
- SSDEEP 1536:dvTERhThBAuFNVukuCfrNWlj/qyjEjoRy5PjSyBrnZ8ckkHy6CFVlHR6uqlRQ83+:9TE/uk1frNWlj/XEjoM5PmZqQFb8ueuN
- TLSH
  T1BE934B2FB19948DBD006DA7489EE86717633FC21C2A4777E0398F57C6F209656B18E83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  bin/libogg-0.dll
- Size 33KB
- SHA256 60728c7d79d1e82b4a2b61afef82f10d9dd71724b402a334af0b60778c711075
- MD5 25f5b8b6d81778230f18408930accd06
- SHA1 e0a844bf13425d41a4268b5f9ba55c4cbeedcd9e
- SHA512 a262861c0954c0298f82f6fce0ce381271722d12e80e5be89d1b6b15a8faaf3fd80c671e52910f59451ac6b1bbb36770dba8b2412202e6356b2c652dd1dcf2c6
- SSDEEP 384:0PCCS8Qmf/0rkxwcKYwYJ2kbU+ku03TvR0LRRCppImMAYnQ9otuC1y4G1K3nD:c5bQO84wNcbnk7GtUplYCE01K3D
- TLSH
  T114F26D1F73629CEEC419C23444AAA331F0BABC31E6125A7B5758D3311D70E647A399AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  bin/librhash.dll
- Size 229KB
- SHA256 fbca7cbf49b656abc5aec1d125a8e980441f4e3c795dc17b37386c79296a2cc8
- MD5 a5a039a8b8204fe9101ae4cfc2f36b34
- SHA1 296fd5b7928b34b6653b08bbb249e5bc9e843634
- SHA512 9a8cbf788b53f05290601adc06455c5b53cbb2923405de94762aea64b1b7309ce80b7e291d0f853b492d1b6e1a5a9ab33c32223e663035ab777c9b0530e509ff
- SSDEEP 6144:Rcf4AeYtqywGIBk9FhIE5/SWFCYOL3fFwZPhbxUggFn:NAemqybFNdAtwGFn
- TLSH
  T14334B0E7EDE11EBAC9A6D574458BCA327A3674305314FE271214C6323C12FA063AF75A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  bin/libspeex-1.dll
- Size 177KB
- SHA256 0661c195653316dc262fa4a55e6ead3058f781fedd0ad5fa0161d2865678f730
- MD5 9549eeb32dbf32d542d8da3662a7a3fd
- SHA1 1398fbf91e94fcae734030d8b2597fdbcdde538f
- SHA512 57b45a6bcf1a0933f1eb13e9ec5d88dc879e75fe3eaed26ce7d707bf1ea108b12c68b9ace636cbee00d31c36005ff5aed902403e4b869efbeb6d936eb86dfa9d
- SSDEEP 3072:xJ+hu1mSYRolXe/+bj4GKg2Gy0niNsGLWCcJe2AXb1XNrF3B:n+hu1dlXeWb8GKg2GwsGSCVhNrF3B
- TLSH
  T1DA046B42A2D74CE9D237D074128BFB7BF531B82402346CBF1794DA796F27A401E9B626
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  bin/libssh2-1.dll
- Size 187KB
- SHA256 aadb230be8f88acd18998e491483fcde28050f279dd52d79233460d4f6dd9bb3
- MD5 afbafc56f8626ed076a6838b9be9b035
- SHA1 03b7b18d542d82011943ab0191f93b921064e9ad
- SHA512 05204f0b94e9fa326fe56ba1373d4c1badb857fe6c8e0b819994721278a5dea0b34831c3e9c27549f763349fd8fb7df9e842746d5388f4c882d211aca5686763
- SSDEEP 3072:WeeYWsgdep7I2neBDQR8RQOujbuTrCLaLyXcdCp1Zy8rOFGfzL71FhYe:WeeYWsgdickeBDQkQO4LaW9p1Z5rd1F1
- TLSH
  T1CB142A13E2A238BDC56BC27452966633F571F8151334BDBB2224EF351B21F606B2DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  bin/libssl-1_1.dll
- Size 524KB
- SHA256 bb37a244974a6bd1b1eb449e0cbeff34c02fc792c8b71ee3cf86d95fae2b9d45
- MD5 b0551456bd54a064904eed0d59b49093
- SHA1 6f1c74cda2875cb5b6dc7d2f883daa4f3a35a4b2
- SHA512 de6bf6e6a3b2c690d577be2a5978f14fa29f679ac473c45895e3171d72db8e4f7475d0d115b3d9ae30805d542179b69e8fccad2c2de85a78b46788dafce98b87
- SSDEEP 12288:TFW80BZL2jb+WvtRwO0vDcp8asRAXptxtqh5mvuHq5R3:TFW8+ZL2jigRw9vgp8asRAXptxtqh5mv
- TLSH
  T1B2B42A26F6A32AADCA57C1788B97E7B1B536F8241231FEAF0614C7301F11E54272F568
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  bin/libssp-0.dll
- Size 17KB
- SHA256 374e7d1f81e2fc438e29482d706f8d3196d33084a8d104eef06b2b587737f8da
- MD5 d1f1cb37632c5dbb37d19373fd4b824b
- SHA1 af776ee7de81ebc6833424f6f4f0bfbb515b21e5
- SHA512 6a1d620c3405a47173f847f2dc5dc99522c07548d9ebfab5119574f58b3f3413676bb39b2e9b0f80239e2bf1b97033b0cae8a31a92e9f78e05268857fad7056c
- SSDEEP 192:10KfXtkvKJApcVkdwnwlKJIPus91Dj8mPAa7oxCooxCojmmUFJtlOF3nf:1v9M5oxQikusPcmPNa6DmmU7EF3nf
- TLSH
  T1C672B52B3397DCEFC206D23841D69735B1B5BC32076A5B2D0618E7764F603A4F53AA86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  bin/libtheora-0.dll
- Size 272KB
- SHA256 6c4871dca26ab4cce64a010b0da5dc3d2c7ec68754877840b39018981784b05e
- MD5 365ef6408c3dda94eb440877414f3aae
- SHA1 f349e5f2b65423d4328e2d206a21380810cf1ea4
- SHA512 56af769284aee0cbfbd1aa19332fbd0d40f5e1d115349f98d6fd203e89b5cd9ed188bd116f58e3ae89f74f810d69e6d9972bc52d5a2bd1603ab9760d07b5c9c5
- SSDEEP 6144:30M6D+h4hZjBflosdN9NdN7urakaFxEmfl6b0jlsaPTF3f8:30BD+h4rtHdN9NdN7uFGvjF3f8
- TLSH
  T159548D03F6F655A8C02784398A7F9373B535B89896145E7B1780F73128A2F902BD53AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  bin/libvorbis-0.dll
- Size 174KB
- SHA256 70cc70a6052c5b4544d26d562298d97b8aaf8545a4f0f0d192aef90563a44234
- MD5 27314f7e2f32a848a240a1cc43ece5dc
- SHA1 fbc641fb7ae29998f4cf67049c9532ae12dd5c02
- SHA512 4293a9b0c6557ee30f6188fbec2c028c2f1ed17099dcb9d2d35fd0d182c57292255d36dd47b0ec5b192c3a7800254211d2aa984523ac7fa4278182a9080f7f2a
- SSDEEP 3072:++PLmQJkb7jHN/zMUjLJNRYeLwEH/+ZWkgI9RtY59F3P:++PPw7pFjNY2egQRmF3P
- TLSH
  T196047C43A152A8DEC1EBC174129BF677F832382C23286C771764EBF91E25E506F4A617
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  bin/libwinpthread-1.dll
- Size 56KB
- SHA256 b8503ee47144da1d378e40538e99f1e18f73159b4750e3b576b81a6278f1d8b7
- MD5 f5f3cb9b5f3c78fbfbef4c8ae987b064
- SHA1 f545b5e49671e320a7fd889e10e3ddde4f0a9d5e
- SHA512 c2e0a095083676696a91b5d81166740884e825dad058036626b3fdcd012994431e6d1e3aaf1d2719ccaecf2f75a74fe26661f03be6d27d20cf8b33c67c6b96fe
- SSDEEP 1536:KP0A3ZHbdW+BMlsWN1lZkvddPm3YkHyEZy:KcEZ7fslivddPm3YkHyEZy
- TLSH
  T19A431B2B73A718FEC167C23845EA53717533F8302275AE6F9724D7312E68D249B2D889
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  bin/libxml2-2.dll
- Size 1.2MB
- SHA256 ede83f57a5870047ad4e7c779a2f97187bda9285e4222da2a744413479d5be91
- MD5 20234e6a31480a687b71b0418c02ff1b
- SHA1 fd243d224ba275dcdc14ed6f9fc3a4c910b925ea
- SHA512 74e106df80907963ad63b25630543127379b8a85458641eee9b3909e9c78496ae24ab7e4f75ab8347c9286eaf97d8c98c979fdb7324044ac199c7baf0e443c3d
- SSDEEP 24576:CA2RdIsNmvyuk5sKTbFIibcbUAMh0kBhpgZOi4I83C:CA2jIsNmvJk5jFIibcbUAMh0kDpTI83C
- TLSH
  T110453A17E1A334BCC66BC274D6ABA271B871B4611130BDFE5198CB313F52D60177EA2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  bin/libxslt-1.dll
- Size 279KB
- SHA256 ff45ac124e130630f3c65efe9d5efaca1b124eadf00245432f1251575c64b879
- MD5 c24be108cb91b1e2bdac63fc9f52d230
- SHA1 1e525f2a2b2b39e9e16fb35d2594954db5c18260
- SHA512 19884071f502d84dfda377219a1242efaf54b6690b39aaf5a29d87b5af9ff180206ce150bc6866b0e12d81ba6e2541343b7f574905ba0d33c4a2f7f7ddf11117
- SSDEEP 3072:gbLOl69mfw0H0+AzmfFerx3IF9RVJxn97iiuslUhvQaDOnNgXCpMJu+yJLF9WgO9:SH9mfwUfFexstJKivp5NqO+ugBGk
- TLSH
  T181545B27E2E214ACC267C27846D7D673F971F82102307ABF5594CA323F50EA4676EB19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  bin/libz.dll
- Size 116KB
- SHA256 f0d1207c6c031c35683890b24b45b3d78926b854a280d0ea5b26044f3428ccab
- MD5 ef336168b0b0232261deb6e724392660
- SHA1 2f5bc1a944dd97a963f02cf4351fc052afec1a42
- SHA512 7d2781e7b2977e3ace7f9d3c854272cc61ab1486ed473ab6974019e7984e47b742b8e372fd0b10251144004bbbaf424d87310a93d5aa73d834a6b83ae3eb79cf
- SSDEEP 3072:BjBwf5JjpI1W8IHrC2wdUoqLBAcW/h2ysCvM0w2F36:9C5BpQWRLJLoqdm7sCvY2F36
- TLSH
  T1CBC36B5BA6E366F9C6B7817485E78B79B930B82007706EBF2248D7701F11E106B186FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  bin/libzstd.dll
- Size 918KB
- SHA256 ef604625cc53a0dee660d7ad6bcc6c052f1709c59c1dbcdae4aeab5edfe6de68
- MD5 932ab77f11118b25e4a735a44bcd1b9e
- SHA1 96907a355318a687532397d0558d8c68c20482ca
- SHA512 da1c98cc191f30267c15ba8a8ad75bf816cb6c5ce13a6d79ad4a92b5726e84a4b8233ad0a7925d5da1ea7758fa2fa99f6c8d29c4d9d579c40f6ad3ce6f76ed35
- SSDEEP 12288:aGyq97Yd6ikRPvfZcw1DVV8c8VorZXqdVt5c+GADiSomkzAAKImfAEG+F3N8:yw5hNDVV8c8iZXqdm+BDbAKkEG+F3N8
- TLSH
  T149155B87E5A351FCC16FC0B08767A273BA31B8185124BE775780DB323E51FA0A62D769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  doc/admin_interface/index.html
- Size 11KB
- SHA256 7b5e9fa4cf20412eae2ad1a7926b8ed11ae0f3e591fa508e1e5c7693a329b4bc
- MD5 f4d11de20cddf79899527fb05b3b357d
- SHA1 7a70941549c2fe4e40ca30b198cf61dca273d560
- SHA512 2c1e7e5c27f7b480c07bdb48eb54c929f8f4182a1e405d0b80d647552290bf549988397b6aa1d3062d07a5b8f61e6ffd5bf80c9116ed8f510999796ddb6dbf76
- SSDEEP 192:zSoKg7hdd8+6yyVesn74NG3JPkVS1PsL1ah/3OVD:zSoV7hN6yyVesns+JgSy449
- TLSH
  T13F3274156AD83337409312D6FE5E22987A9FD04BE206384434EC839F5F62E4A5E27EDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral30
- Target
  doc/auth/index.html
- Size 22KB
- SHA256 24841a4567a324914afd6c66e2e6097679e0b790108d3c37b6338e7706842194
- MD5 aa1880a90312d0aef71b716a5ad1e37e
- SHA1 17156035c5b549e132e29591168d2357b6d4eaeb
- SHA512 854e3b32234c8f468d040839a5b81f3cef6d624420cced3a38770938a3e05f590eb1cd425ef2fda05c18f326f1027934f1960f2ac7ea4def343d21aa1862ceb7
- SSDEEP 384:zSoh9h6CebZa3ImiZHRWayBagGyjbYz3J/tqmCGtLLUo/7HR5LCVCOhTeCVCofUm:5VebZohs9ryfYzZ/lCGtLAo/7HR5LCV3
- TLSH
  T19DA2A2066294127781D243BAFA1827D0377FC29FA38128D438ADC35D5F51E0E9AB79C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral31
- Target
  doc/basic_setup/index.html
- Size 11KB
- SHA256 90ed57c3b400339174f33810097976db65b0cccb3cb45c82fb6cead6f302286d
- MD5 335e95c29426cd50312a41b86f4b73ed
- SHA1 0fb01e7e2e3c538f2d19004b366fca0699700def
- SHA512 9efe7bd6a28a9065c451172b5974d6ebe60123fc4cf241f3f9ae5a90955c7563b0d120708a87048a5e467467b9414e53c95fa22761a9c785bd5fc0b6b9ff2d86
- SSDEEP 192:zSoLgCphdd8YTxQuGM2sy/y+kX753uUCMx7/Rmm58VDLU3VXD:zSocCph/T+uGMvy/y+kX0q7jKEz
- TLSH
  T14E3296165AC4533B01434252FB2963D9B76BC09F92062C647CAC874E9F66F1F89376CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Deletes itself

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32