5caf5a21a119e3cab8c279995c0a8fefdeefeb527bde4317e91b42cc728976c1

Sharing

Copy URL Twitter E-mail

General

Target
WINDOWS - MtE v5.16.zip
Size 830.4MB
Sample260628-2lkzpsfx4s
SHA256 5caf5a21a119e3cab8c279995c0a8fefdeefeb527bde4317e91b42cc728976c1
MD5 439c046e809f0a916ad04a8160be47f4
SHA1 8c306095eef122c6bc4f5237076f347540475d17
SHA512 2cfb6c615d179f035b261ba0f3899e89fa80408c9e12ca212ca47653faf14f49116685282eb95e11c11bfdb2d5024acf06373f7a604024e9a649f2f843604757
SSDEEP 12582912:K6gZTHNz4XJMTBjHWjvm+dmk520I7L9PvkYWzX2fzsK6EZLXE/ki2w+KIkawl58N:sNtUmWjO+dv52zvWXyCoQMm9SiasiRf
TLSH
T194993312438DC487C669E83C60736C8772B574E97249D1BCE99022F8ACD4FB2E566F1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  WINDOWS - MtE v5.16.zip
- Size 830.4MB
- SHA256 5caf5a21a119e3cab8c279995c0a8fefdeefeb527bde4317e91b42cc728976c1
- MD5 439c046e809f0a916ad04a8160be47f4
- SHA1 8c306095eef122c6bc4f5237076f347540475d17
- SHA512 2cfb6c615d179f035b261ba0f3899e89fa80408c9e12ca212ca47653faf14f49116685282eb95e11c11bfdb2d5024acf06373f7a604024e9a649f2f843604757
- SSDEEP 12582912:K6gZTHNz4XJMTBjHWjvm+dmk520I7L9PvkYWzX2fzsK6EZLXE/ki2w+KIkawl58N:sNtUmWjO+dv52zvWXyCoQMm9SiasiRf
- TLSH
  T194993312438DC487C669E83C60736C8772B574E97249D1BCE99022F8ACD4FB2E566F1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Max_The_Elf_DEMO.exe
- Size 635KB
- SHA256 6b92e87a684f75008355d676c8c91688df9e2d7c2be88292cfa64d622ec5c271
- MD5 6e90abeece29a2a86de3d6f5ad7afc1a
- SHA1 c00f96c2ce1ec898c193e6a5fb8ae0e83801d119
- SHA512 ff90c93931abaa26ef7a58ea56ff91e62a308eecd125fa1166462e4caf862e34a653f9913423b6c1f983e5792596d715396bdb4aceabbbc3427921abcf317b43
- SSDEEP 6144:/BCic2D7kN3QDx/jSknNkw8kk+MA2vc8skZK9RpHSELTm1+rhIHm49fukkCVHO64:ZLkN4jSuue2vc8sb9nSE5rhIGUgOTrk
- TLSH
  T194D42BCB704472E0F538843315AE5D221613BF7743E0CA997748B2625EA39529DFBA2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Max_The_Elf_DEMO_Data/Managed/Assembly-CSharp.dll
- Size 193KB
- SHA256 513af159e674fd1e51c6c06e2bb7943ce57c263124ddc69217fbaf09aaf08e0b
- MD5 4f9d46114c6f02e63730770c2cab2f3a
- SHA1 3159b72164a194fac8361ab2aad2444feb4a0b18
- SHA512 bc98642b48d6aec3adb5acfff6caf3f63bbf3aa86e4a52bfaaff28cc0d20f34afde6b6755f43401a6d4f57c1529574ed369f6d6664b944b1d0999da29769c84b
- SSDEEP 3072:OyDLRw5ak8BOU5tlvOo7RnIqPiv9smyq8p3QGr4jKBOx2+RsW+S6h/:ROQJBOKtl2CnIMOD8pgH2+Rsfh
- TLSH
  T1E1144A2473EC163BDD9E43FAF8511944E3F2811B71AFE3C89CD5B0DA0C96BA09952627
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Max_The_Elf_DEMO_Data/Managed/Mono.Posix.dll
- Size 207KB
- SHA256 6e1c5db7586ab1796bcbefdc81375c215e01843a972020a5e08dcfe83570c949
- MD5 ab7ea63714b22a38d5a267a106d86020
- SHA1 5135687708ac619502d2d882a1546d7878ab003a
- SHA512 a0be050181a2550a712f5349c05b21aab51a42c1d5aa400da1191f313767e6d08c6e3c9aab7125dcc1a59525f074a120b12a3d13efca0eee7e40e474d04802de
- SSDEEP 6144:ec9wE0Q11JQ1S+OWMYU7nUXxOwblnsAPeeE:ec9wE0Q11JQE+kY1SA
- TLSH
  T191245C5457B44609E29D6738F8732F098379F88E7E13A39D3799EB391877BC488016A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Max_The_Elf_DEMO_Data/Managed/Mono.Security.dll
- Size 302KB
- SHA256 eb9fab2c68e7cf64db20f676353520344f7220dbe830c904e1bce82ca087b7ed
- MD5 2316c1c6703e487bbcf694880d7b7d1f
- SHA1 4976f4402b4d9c308b3c86e07c7b675581750ecc
- SHA512 f053845f50e620f2ed3bee11f26b294b2716c9f6a073bc543c977c9e880b806e837d1f71cd1f37e74bd92348c5cdcc1c3ac39242785c4f94df19051d77eef04a
- SSDEEP 6144:tJvWNTGENjTzSQfGFzPTzcyaksosrjn95Aq:KmFz9mj
- TLSH
  T17364592923E8632AE2EF9779D071441647F4F506BEA7EB4E5C8250FC2C437929811BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Max_The_Elf_DEMO_Data/Managed/Newtonsoft.Json.dll
- Size 395KB
- SHA256 830e019e1796b4eb5a8b0e72824972a70c4bd266428ecd1770e680bcb6861bdc
- MD5 b430e0b62072662df3bf84fb33ce6ee2
- SHA1 4d2d53ddd76c0ec4031feb2877f897f08dea9c8e
- SHA512 fb911ed5c136b33965767c2bb826a91dc7012bfb762cafd247f950114154ea42e2e7e1399d7ad82161b52834b8afecb2b90fc5c77cc788ff9144d5c4a725e098
- SSDEEP 6144:XkQIZDYZ3y/KOMKpghLQGgZRQxRABRFDngLy/1GQjdaQkgCY:qhtphZRQRAB6y/oQt
- TLSH
  T124844B20E3FC8726E5FF1735E434560887F1F947A27ADB4E1A50B8AA2C9775488603B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Max_The_Elf_DEMO_Data/Managed/System.Configuration.dll
- Size 122KB
- SHA256 6a23b3bd81ce8e5ea8681e92181e8909266da5b6ab5c414185cd2ace01bcc4eb
- MD5 f2c529744bf4a6b40cf08207e68a005b
- SHA1 759ae613b4dd05dfdc55482ba9e575310d3bef00
- SHA512 50c64d16e4485b5d4a14cf99e4bb76945278b4271b1f5f4f034a01daf28a075a50db5c86b3f86c75c46267b7cbad8c4a9accc08c54245da2b43d2fcb6c3ec5c0
- SSDEEP 3072:aH3xt3GrHyTALVXzA4k8y3Kpn5WJzL0MIegH4+:aH3DcSTSVDMJV
- TLSH
  T11DC3F82563EC876BE6EF277AF8B514100FF1FA0A6436D74C5D99B0ED1823B804662763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Max_The_Elf_DEMO_Data/Managed/System.Core.dll
- Size 1021KB
- SHA256 a8ca3de873188598bd6b870f48fbc85ca57d24ffe054a4963dcb9c9eeebf55e2
- MD5 4b2b01e0df1e90ff03d0926cb54c7f49
- SHA1 932d8fb3944b71486513fba6c169c2aebbece1f3
- SHA512 9b6c06098ad6db6cbc5fb3045d321050481722b18e431e664079ea566e5939e25f8f0ed48af896613f60394b4ea416138f9afd7ac46c07653f5cc10c72a5a68b
- SSDEEP 12288:DDQR1+Dy+BcB5Qud7DfVsL9KVI36owJKbYuB54wkHXdt:Un+BE5jVsEWIWYuB5
- TLSH
  T192253A5277D95A2BD5BF7BB7A038022057F2FC639FBAD70F124069690C62B40DE543A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Max_The_Elf_DEMO_Data/Managed/System.Runtime.Serialization.dll
- Size 906KB
- SHA256 91bb5dea5e85faa0fee964dda0ce9c89a2f67b2c7dd45c3653198372f7fa62cc
- MD5 756cdc64d32502a3abb9c8291bf33ac4
- SHA1 84d06104b8b38a2e31634fe3cc13b50049bc5d96
- SHA512 9475728ab1fb36c8d81d5a78c15bcb743e28849e575143f5166c8d984f011b628fb877bdd9ea46b30f88dc6ce277cfb78136fc34ddbbfbe897864e5f6153cb54
- SSDEEP 12288:hDxoDU2+ZkFnHo1qt1+DBCtQAvL8qvKL:hDc+Zs1tw7AvL8qvKL
- TLSH
  T1FC15190077FC9617F1FF7B76A8B506948BB5FC1AE9BAC70E4600916E1CA2B409D513A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Max_The_Elf_DEMO_Data/Managed/System.Security.dll
- Size 180KB
- SHA256 bf12669bb93a6b8971ffe69702d9d8a99525fcf025fcdecc1a19d6d487f862a4
- MD5 2eb690f489620006c6008b0442933a7f
- SHA1 0a94d235b94091fc9361849a42b70d91f8b29378
- SHA512 9b5a23f1858c92e494c2c22350d82a6b76401aaa2ea6f06f7722a91be8032c6f9bc36ca8fa9e3eca1a252db5c24bfb625392827f7aedd21489172cc31d948413
- SSDEEP 3072:rr8JG/QlTReXnVzW72nDLR1RNdxz9nI/K6ZoedXHpnZQeU1GGeEebgUKFzODhSKh:rr8JpeXnVzW72nDLhZz9J4oQJZQeBGeG
- TLSH
  T11F040824B7E84319FAFE577DE0B411065AB1FD06BA7ADB5D0E9112ED0872F808812B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Max_The_Elf_DEMO_Data/Managed/System.ServiceModel.Internals.dll
- Size 209KB
- SHA256 6dbc7b2324089821ed32b8dc716983672f3e69dee1ebaec7a87066df3b141521
- MD5 603180b58a2f1347e474032f5e425e06
- SHA1 02a87e85f33e4d09eacaaa8cfadede93d18b658b
- SHA512 a76a76184bff77c8eff5447d7d0589b4185f97363afdbb69dd849abe78a32a7b7c992e60cf42838b1697ab28e06f267dc6fc0cd73250e8dba1552c2b6383417b
- SSDEEP 3072:rTFWqTJtv5WbccyM78vqcqO9jft/ixGVZNCVlyDaD9rvVk9Jk268Z+hNVtUXE+mb:VhyyM78vqlmjfF58lIaD969Jk2KQ
- TLSH
  T191245B24A3CC4F22FAEF0B7BFCB1649053B9F512F89AD74C6D8451B94822B54CA51B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Max_The_Elf_DEMO_Data/Managed/System.Xml.Linq.dll
- Size 116KB
- SHA256 88cefa16fb0042ca4efd9acc63a476a96dac91513153facb8e274762d56a9599
- MD5 047ccbad12a5d138a884a4ea3c17c217
- SHA1 5f62c9a133f2cb0459fb58e9dd17dd2bd918c2a7
- SHA512 b6f912501be8f963d6254002a256e043779a4f078e7c7e4d0258019d9f5a9a03182a46656f4f388976440e9a37378fd2a2eb237864a611ebef6964bcb495fb40
- SSDEEP 3072:RNU5ioEWuB91Z0S2V9Pv4frb8QfE9Knt8ZtSa:dBEzPvsrb8OQPt
- TLSH
  T1BDC34A243BED8B27DBEF93FCF470651557B6B466A502E79E6854E0FE18437808A013A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Max_The_Elf_DEMO_Data/Managed/System.Xml.dll
- Size 3.0MB
- SHA256 0a6e132efe42112936087b01aa18f27cca995e3b0313105e2c931561a8209fc0
- MD5 23299b0c70c5377fb11d8a7b860c54e0
- SHA1 a70bdabac1edb23994f3a86e3bde35262ff4df96
- SHA512 c4a78e91f06595c5666abb7214aa1584e94d278670dd3827908e7d55b9acfafd581291a896fc0c66a63eeffe6c73d07573c444126860c2e5c9b97acfff375c1a
- SSDEEP 49152:JsYTcCgwYbmuLn+0zZAHHyPYAs38PCN5H7UPM:WWcCgwYiuL+0c
- TLSH
  T1FCE52841B7F88E26F6BF7778A439412547F2FC09EBBAD74E5640E16D28627408C613A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Max_The_Elf_DEMO_Data/Managed/System.dll
- Size 2.6MB
- SHA256 f5a8c3dd16b87a91f64b109b512eb923bf62b198bef70bd2b4a75253149a5d7e
- MD5 368aae59b8d28f0cd3c85bc1ac638bee
- SHA1 fb4a77a77d3d7cf95092b712c54eff6b07b29a3e
- SHA512 5c752dad44123de4c650e329a65eb9e575bd8317a9ab4c98e9b880395d0a3ef3f45c69f64cd01f826f9007005855a44527f8f862fed5a6cc3b6c61e3c5776ac3
- SSDEEP 24576:v7P4ihGYldIqNacxXYeZ6dH7UYzZax2q18bR1LG4axbDxv0DDm2OBJITQzbRcCDK:0CKWxodHjZanuDa2OBJITQz1c
- TLSH
  T1E0C52900B3F86E29F1FB3B35A87425110AF6FD49BB72D64E655091BE1C62F808D617A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Max_The_Elf_DEMO_Data/Managed/Unity.Analytics.DataPrivacy.dll
- Size 7KB
- SHA256 f0493b074d2c5c9c959c6771d32402e1f441071a0a277ae0fb5489804bb46f91
- MD5 5e48cab9e0e9215e861d0ddd69e5c071
- SHA1 512d4266e722dba849fb4617f7c0c03f85d33246
- SHA512 56e0293f891176646d1df3595ba1732239b47ef77e30519d5dc22105e13a1b48c061835aaabd12e60b8a3164a81a86de019ced0ed4cc09c0cbd8bed7ea901e5a
- SSDEEP 96:i3ULjrQ0EnCVbA0pDW/38jFKyrgcLG1RwqHnKRR/7N4dyR6zRDys9+Ut:M4jrB9xA86/3byrgcLG1RFqRr4o0j9D
- TLSH
  T122F1D766F7E84627F57F0B3EDCB5424122B2B506AA61EBBF299C808D2C316500DD1F79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Max_The_Elf_DEMO_Data/Resources/unity default resources
- Size 3.5MB
- SHA256 15150be5e88a2675beec66f1217a31ecf4593628799e86689db8d4a9c43bc7e5
- MD5 3881a048d6ca48f04fb01b5afce9cc7b
- SHA1 f82ab6be14fd7d05a3414d8e9ebcb2ff9e4b9d2a
- SHA512 d909503f884aa0c50bc0fd5d18b7606c5ba7d632a0183b4a476586740f756aadbb94a1d2daaa06435a1b3b0267616e3c75c5b671550082b0bc1caaded13e1320
- SSDEEP 6144:jmJlKyBL6ihOt9OYWjJ9WqdJUZHgk63uyS0q6sJn:CTh26jdQuPSkIn
- TLSH
  T145061B153251D06AD81B04358F63DEEED27EBD98CEAA46033BD43F5FBCB16484A63264
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32