8f79a3ff138ef933dacf809dab3cb4f13aa5591ed1dc791c7d4ce6edb3553519

Sharing

Copy URL Twitter E-mail

General

Target
installVS_agents nueva versión.zip
Size 197.5MB
Sample260625-vb469sdv5t
SHA256 8f79a3ff138ef933dacf809dab3cb4f13aa5591ed1dc791c7d4ce6edb3553519
MD5 616a0e7b9483a6cc2a4ca70e9be44cde
SHA1 b38dc8cd5f58e98f283b32c7e9f77fe7d05b1293
SHA512 f3bf68aec3d93934b90e21875e630b59872275804354c3818be8bd4168cb915f7407da8282927e83c89bf774bb6b1b8226b70d3c3f018f13c3dbd53d3066be81
SSDEEP 3145728:4zuCeUrABfto4Fql6/Ey/1bwPFwMp+y7eOOwKMEsBGSsN3Zlsb7fnJsfkydyENW:4z5ABftoeM1PmAKDs7G3Zl+7fnEkyLQ
TLSH
T1C8A833D4C07673C8A533E45AF4401E518383A5C949A6C2F96B5F6F022AB76D7DFACA03
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  InstallVitalSigns.sh
- Size 93KB
- SHA256 c28ef5590374e80e4cd80dd383a1fc6c2173939062efb9cad2cd8ca464c830cd
- MD5 3d24eac6bc0a0440fcfede953ce4f659
- SHA1 2372a5afd220b27d267fc975f92cd76d55c2180c
- SHA512 6f60fa59a19f8e9acb7034f8d41c95bf743d8470d0557a9fe1ac2a9aff93e3b0a66347cc790d932a3176048800ab144a310e0702b3e06cc3c0f44d25d9965fd6
- SSDEEP 768:XXgHkWUHXL+KgJfAYt4wrxczLOb7BiNJKpLkRbg4xO2nZZ8azwy0lOPl9eXibpPw:XXgH+HXqKdCA1w6tZERujH69
- TLSH
  T14293F810CEC91CF3265ED25A7283C903B6484083BA085428F6BDC7687F99F9D92E57BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral1
- Target
  lib/monitoring_agents/jmx_prometheus_javaagent-1.0.1.jar
- Size 2.8MB
- SHA256 7d61f737fd661610ccc14aea79764faa1ea94a340cbc8f0029b3d2edea3d80c1
- MD5 f525facee9d400d163e5366c02d3aa68
- SHA1 f9c53eb0aa1828c3c9cd7647238563e43a4ed68c
- SHA512 f81d876e8110cbabd4a9cb3fe1740ec2d896ec4bce5cb5049a2d74c40f43781418cea246f40e6afdfabbdf0e162cb837625f496dedcb76aebbba53b6ae7cacba
- SSDEEP 49152:SLdtSbhgmEjFklqMZOn186lmCI4ve18pWNVUeSKHBkNCVDUfTbf4nUYCZ6pnR:SZtSb+ilxZO11IsiPjh3hk8ibb63CEnR
- TLSH
  T180D5D02BBE91883FD19BC235450186273F9E1D55F53B619223A00C69AEE9DD90F73BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  alloy-linux-amd64
- Size 346.3MB
- SHA256 5a6c68df6e4be10b785d5d9a10d2d8a884f73225ec125fca56e3c56b2461471d
- MD5 d562ad5078d28c4306da61e58e77ce36
- SHA1 11bd9fa821a7a2ea61fcd0bb4d34bd4bdd30dd30
- SHA512 728af884b3af0ea7936a65ee112d8347dcb33358a6e513da4b36578ae989483acd76e61825d004d51a5600401dcd139f5e6dbde65303590e085506438b5371ac
- SSDEEP 1572864:Bc60aNO8w5HFWiBjpMXNirDeF/HABF/P+gMqTI1VMiQOiQ1rTuSKw:S4Y0YpMX4B9P+g3WMignSKw
- TLSH
  T13F094A53E99540E4C5E9D534CA769223FF317C888B2027D76BA1FB246F76BC4A67A300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  lib/monitoring_agents/redis_exporter
- Size 9.0MB
- SHA256 5d058c84083d505e364ea5cceb8fd7c66f472a9e3a228877480144a43f71b3cb
- MD5 a9980b7249884b3a2c3d67bb3440e742
- SHA1 5c55a6044c48df4477e4dbce7b6abff4ed926bf7
- SHA512 675633acc0e2ccd53c31ccf39277047c377d1881360f0041bd2049ba82ebe019df185e8e4f1c06e6e51da45c7e840891d2af973fdfdad8bb788f90adbb5d20a5
- SSDEEP 49152:h2Ro5g2hRTpH8PV8wejK3adqHRruG74LKhFYgTdiZoWeCIMI4r8igGEUHjEc5Eqa:Q2aK8xcdYFYgnuDEqN/jPUlL
- TLSH
  T19E962A43ECA185E4C0EDD63486768693BB717C488B3467D72B60F7282F76BD06AB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  instantclient_19_6/adrci
- Size 40KB
- SHA256 c452c4ebf522f67073b32b217e035d1fcc8e893708f16fa7a70d971b9433768f
- MD5 e2cd7a17edcae3afeea7434cae8e2290
- SHA1 fb9233b73f79e06aefd1de61012cda1ea413c642
- SHA512 7f86db75e69941699e17ddb815471767da9ba81e2a0d1093349d2685897138d1d92775378e0a2929f163eb7f956a54df7c19a2d7f936c182d66614356833d585
- SSDEEP 768:twTv1xv6Gbds3pzwGuvAClMmSkJzC2OYSkENNcC2xYSkiNhIC2DYSkiNEYY:I1xv6Gguv/MmBCvYRCcYzCgY1YY
- TLSH
  T1B713F80BF69CA96BC0BB4EBA25178A10A563E0354E734B73C951712C5DC9B892F2FF41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  instantclient_19_6/genezi
- Size 57KB
- SHA256 ea9eab86aa17fc33354d9d9d0100d72e3d3fefa1c4768a98ad0e3d1091380005
- MD5 8822b96c506e0a64aefa397dc2cf04ec
- SHA1 828932837cfd54c44c1d00e70ee56061f8a55bbc
- SHA512 89e19062c817ec860e80a130024a05314f0a7ffd5c393f11da9c119eb2fc5fc2bce1bc6d80e365fb458f61d610f503ec3c3df0b102476e2b95299876f512dca3
- SSDEEP 768:PlP1SNu63xQWfuUadl2gE0gyuie16OtCLoZ/cY3+Yw2H0HCLds3p+wLBCAC2BYSP:91+b3xQWBadljc6O5Z1um09CYYxyn7
- TLSH
  T1CE433A07E68492FEC4B5073116CB4232A67360351B6153273889E5F91FC37A8DA3E76B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  instantclient_19_6/libclntshcore.so.19.1
- Size 7.7MB
- SHA256 603420a74be218df7044ed7e3902c7e42a2321da6288c51b191417c0a9c17fcf
- MD5 0a16cc8caf353d2fa6b74922a86b7737
- SHA1 c9df37d6ca589ddf1f68acc8be8a5fdabc14060b
- SHA512 165b71d6a155009105603b8a79c17b90697f6b7728081bfc56a43f4ef01493b05ee157b92daa32a76a0891a3982f9284bdd0798afb0fe8d28b518e6da5582cb6
- SSDEEP 49152:DpfFdfl+PpesN5+xpS7GiqJqurufIwT4Fhgmbi6cID2SV0mRyZwN1f:Dpfnt+P5eSHfvoqmbipID2SV08UwN1
- TLSH
  T1EF86080FFCEC85D6C1B27EB639458B32F932B27A0E53AD755901E6086C8D9960127F72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7
- Target
  oracledb_exporter.0.2.8-ora18.5.linux-amd64/oracledb_exporter
- Size 6.9MB
- SHA256 788d5ff6e2b613582bf68c04f2006349dc9fd2669ed78e9dd63ac5ab44b6744c
- MD5 8acde48303d466352ce899daad69831e
- SHA1 afa76d6d6aa2db967b3e8c922cbcde7bc3e034cd
- SHA512 b67c8d3de078b9db7bba80bd8636ec99934856195b86e683a839ed988209a4538f5195cbb87da505e1aaa0ca3f069f49ffade52515d329a4509e652dbc05db58
- SSDEEP 49152:oaukN437mNknQJ+/N6Q9a2D660hrjfFPicEbujJjhjHnQK+eviUdO9vyT06szZlB:ohxSigiLD66krjNvjJVnQvtp+A
- TLSH
  T1ED763B13F8D544E6C6BEF13487969721BE7138A6833177D35F909A661A36BD0BE2D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  karaf_monitoring/jmx_prometheus_javaagent-1.0.1.jar
- Size 2.8MB
- SHA256 7d61f737fd661610ccc14aea79764faa1ea94a340cbc8f0029b3d2edea3d80c1
- MD5 f525facee9d400d163e5366c02d3aa68
- SHA1 f9c53eb0aa1828c3c9cd7647238563e43a4ed68c
- SHA512 f81d876e8110cbabd4a9cb3fe1740ec2d896ec4bce5cb5049a2d74c40f43781418cea246f40e6afdfabbdf0e162cb837625f496dedcb76aebbba53b6ae7cacba
- SSDEEP 49152:SLdtSbhgmEjFklqMZOn186lmCI4ve18pWNVUeSKHBkNCVDUfTbf4nUYCZ6pnR:SZtSb+ilxZO11IsiPjh3hk8ibb63CEnR
- TLSH
  T180D5D02BBE91883FD19BC235450186273F9E1D55F53B619223A00C69AEE9DD90F73BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  nodejs/NodejsConfi/www.js
- Size 2KB
- SHA256 728a2584dcd42150dad0806f8af22bbef63b5fa09f9f314df2967c6bf62a2efe
- MD5 a85a0fa1095340685e2c54d83b7db77a
- SHA1 990bb649c77d47b99668c4837e8baff72dcad9bd
- SHA512 c7840d1e23957800008654e819b7b3cf5ba73d5d97cf2e1cd54ba83ea963fc9c6599deb0b67b8966c369b4b72c6709a6b4488d043f21548879744912b8838c9e
- TLSH
  T191412FC9DA5E0C4E7DAA45D394272301B293C962C3143882E3C4DCD366D3AE4B3B7A39
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10
- Target
  runtime/httpd-tools/el7/httpd-tools-2.4.6-95.el7.centos.x86_64.rpm
- Size 92KB
- SHA256 957044053fddfadf6af05b5d0547e7e1cb21cfcc56d920955a3f3c60cb66a3a6
- MD5 bac3f9f9dc0c70326f7872173db86797
- SHA1 ec466e967cfa4ce085e2203dc57228537858a25f
- SHA512 3491b4184b435ad1c960235ac0944f72976d021df86c0273b40b27c7bdd43c8cb6676420138a2c0105880c774532d67047052bd70c0dc9a823b2ed463bf575bd
- SSDEEP 1536:10hQxVxWdWbBIOczfa35FkioPQw5VLmzZ/KIhmW9Ffco2qPOaw:10hQxVxSWbBIdzfapF644wl/K4mW9Fk/
- TLSH
  T10A939D543518B0F9CEDE63BFC0291D12925E2C99D38BD5F0249A87D4B943EC86B7FA18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  runtime/httpd-tools/el8/httpd-tools-2.4.37-65.0.1.module+el8.10.0+90740+3332f30e.7.x86_64.rpm
- Size 112KB
- SHA256 30d112b7157d53d09a01931391e348c97e6efdf9c057c898030bab131dc380cc
- MD5 3539e833a320b09cbbb7983ddadc0248
- SHA1 d88c94fe394df3d34acb3f3de144c9e7e9df1ed0
- SHA512 cfc73127785e4fdf77c1a4041b1503495f3b6b70360fc08a32e79661c510736b46ae511e8533dd92bfc9af94206fadca8497489f7f7ae0d5a5012d0847ea710b
- SSDEEP 3072:cmbOT9qBncGnCuXOoTK/3g++9BZLYOUc8uthspV642Xfd:czqBncGnC4pu/3gBBZsOU7VFI1
- TLSH
  T1D1B38EA4351479B6DA9D63FEC0061D42924E7C99E38AE9F060CAC7D0E643ED87B3D61C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  runtime/httpd-tools/el8/httpd-tools-2.4.37-65.module+el8.10.0+40053+5a18018e.7.x86_64.rpm
- Size 112KB
- SHA256 01f7777c7ee0d702518eb3b825dfbe85e73b54e4b355335c7da191045381a00e
- MD5 30380626804e8cbe50baeab226bbb5bd
- SHA1 c538d4cae7c560ccc06022fa5849002f85e47612
- SHA512 a51b17c340ee0fe3f61919af326775f983e279149cf233a84448c5c2922fc64dd24c706fc69141b0a172b9ec334ac24b8b41775d96dc35283a0add34394bc1e0
- SSDEEP 3072:TKmbOT9qBncGnCVx5t1B8Syu93lV2KAhhNW33x:+zqBncGnCPb8ru91VmjwHx
- TLSH
  T13EB38FA475147576DBDDA3BEC0061D42824EBC9DE38AE5F420CE97D0E603E98AB3E51C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  runtime/libnsl-2.17.so
- Size 113KB
- SHA256 64e061e2cec6aa3fe88d4dfffe6cbdbad361e5e7af34ad6994ad6cab71e324a1
- MD5 1df69bc22051d446ca93f637968a36f1
- SHA1 2fd1ea179716e3d959d8b4e687a264d217b558f3
- SHA512 b1156c640ae630aee4f8a3c9d893d0c4dc3a9a57c4a95104b3004070af07fa585e96c85b33243816b64cde3806c627e3a73a2c63d859b97aaf8d830e49ffd8f1
- SSDEEP 1536:GON/uqWcLiIQddokKKDnO9Q+bF/UZtDDj18OoBY3:GOl5j8ddnDnguZtDDj18ZBY3
- TLSH
  T1C8B33B0BBAB288BDC8E2C5344987956225F0F8F41223767B7504DB7A2E41F2D5F2EB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral14
- Target
  servicios/cache_monitoring.sh
- Size 1KB
- SHA256 300f7c21d716145b3e29e5991fb3ba30a8c5deade0737ab3d40ac3d43839c8ff
- MD5 5d0b5a161e348fe1d0b9267878dbbf0e
- SHA1 5e8fcfd5795a88ad81333110fb2cfe18bd08d1b1
- SHA512 f61c5894c159013e7920bef672331c71e8bc60d6b5bcccffa220118d55862a25981c53bd4b0e420a1c0b6464b97f394219cf4bc1452901dab80f92a311a425e2
- TLSH
  T1AE31104E9ED9A9B7509660B6B0C352837A4CD4837008AD04F5DD83E557AFB8D42EA1F2
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral15
- Target
  servicios/db_monitoring.sh
- Size 2KB
- SHA256 0a334e9845739589eaf758aae2bd1f4e4f390eb523c6ee22bb4ec6cf13150a69
- MD5 e6b98ec871ab1689f5d9e48bbd3c7980
- SHA1 2a4461af9852d78fa9346fe6a9ff6b5661652674
- SHA512 7495a42da9e40ab7cc84aa54ee29c2af297a986f7b40c06b504f0f162c28e2d4cc1fd3ddc6707b80c67fa021bb9cb26e675e0c1fb65bc720e13ba6bc56b634ec
- TLSH
  T13F41656698C9EE7B387E21BA7349C7025229084679609D64A5CED334A73BB1C489C834
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral16
- Target
  uninstall/UninstallVitalSigns.sh
- Size 21KB
- SHA256 0b6198adb1cb7b08bb6fb4ad7928434fe4af9fc4a72f662bf68a531f2100bbd3
- MD5 5d85f0272ee6af3b898a7d7f62268cdf
- SHA1 fc8d598c023b4e77269f80ca42622d8bd17f8b1b
- SHA512 de087db0a748c863792bfaa91341def107242cc5648cde37c7a2dbb3b8c82889fe8e18cec79e19da563556119b5248e72562bf5d7696598b7dded3299197dabe
- SSDEEP 384:h+/8vMEb18QtSgDJpF+YfdrY7FYpYuYwdYtQT01FgYbKg+5ik:h2a9b18QtrJH+YhIwtRkQT01Fn+kk
- TLSH
  T1BBA2A860D59D1DF22949A36A7683E48330880043B11C6038FADEDB297F56F9EE1D7DB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17