cf4afbf971478cbafdff7256fafae9ca13b22731d4c5329fb32acdd465ae2dca

Sharing

Copy URL Twitter E-mail

General

Target
Архив WinRAR (2).rar
Size 670.9MB
Sample260628-nfjb2agy7q
SHA256 cf4afbf971478cbafdff7256fafae9ca13b22731d4c5329fb32acdd465ae2dca
MD5 ed9652a8bb7795f44e90c6f0bde24988
SHA1 db58152d60d8a7b26485e3e0dfbca6d73092523b
SHA512 fb4b384ffc396b3e085ac3bb78c771ece51221b143a39e19bf16c285ea7ee01881b225d808e3dcec7d5d903947e112ac30b72f1765529cef3ebb479c7f05357d
SSDEEP 12582912:dYyborJ0ZP4hNmpc7xdkAUs2i474IHeQBFn7E4tD5GznXedGrQAS31MqTKz3mn:dvXZyWycsp47VlF7TlG7XedGMM9zQ
TLSH
T19C7933CC0DD1DD1256387D99E3386D8C0AE380B570FA9A7BED673BD78B2698C4879460
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  lib/py3-windows-x86_64/d3dcompiler_47.dll
- Size 4.3MB
- SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
- MD5 7641e39b7da4077084d2afe7c31032e0
- SHA1 2256644f69435ff2fee76deb04d918083960d1eb
- SHA512 8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5
- SSDEEP 49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt
- TLSH
  T16F267D5677A840A9C27BC178CA574313EBB1781403349BEF55A0C665EF33BD26E3A728
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  lib/py3-windows-x86_64/libEGL.dll
- Size 436KB
- SHA256 b20c1e14e42da55c13dad3c23a5060ca086eaf5b18b12ef5c60cd7e80276a9f2
- MD5 1090bf4c5495697a1416cd77481cf7d0
- SHA1 94452eed4fa88dcb0a5b3c503a12f3a3b5f23ee8
- SHA512 d205dd98260d033300afe3f2a1c0c06f3bfbf158067fc3290e10ddf6f51eb80b57af56fb0e75a56b82dc3ec49190c5d2c296aa548b64e39b4b004f60a7da89a6
- SSDEEP 6144:CrHQz/GL44uCWgSqTpyGRxyB5EdpmMB6cm+p4HRw0FlA1Qu4P:uudhGDyB5Xa4HRw0FlCQ
- TLSH
  T182947C29B2A448A9D036C038CA174A72DB31B89A0F75F7DF12E5D2692F773D45B39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2 behavioral3
- Target
  lib/py3-windows-x86_64/libGLESv2.dll
- Size 6.3MB
- SHA256 2d171e91e1fe7205b76dd69ba9f7ddce7910283a5a5111c09c84f5db8c795a74
- MD5 7dde909bd5c7538ac46064741a8da6c0
- SHA1 46b50003be83eab7e0c48ebbd9260b5b021e70eb
- SHA512 a057586a0b566c5470a6508e27764f9662ceaf3b08244c3db3d1e07789e87a30a43f1daad0274a4e3d00b641d3f9f90e9c073a5f7db3fa6d1de7f45c33adc092
- SSDEEP 98304:1DACC5v8sHfvlfkvghk3xlkihzsfFUQOJt6c:CvxkvgfyoiQOR
- TLSH
  T1BD665917F2A281E9C009C135574B9632EB31BC851734BADF2294F6692FB27E06B3E715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5
- Target
  lib/py3-windows-x86_64/libpython3.9.dll
- Size 8.3MB
- SHA256 180aade9766446743ea650a4afc28cfaf21784fcd64e30a1b925e8868bd5ca6e
- MD5 5d9b86fe40e6484b6ffba69af9fd616e
- SHA1 184c524ec46a036c54188e0658af737746ee7d1f
- SHA512 45eb3ca880b08d02e9625fedb8593684841c534048630d31dbb35090ca7b47ed2d918b05603751a6ff74435cf6a9de248eeab01a6a701f72097061bbe15838f8
- SSDEEP 98304:jt85Qi40yDueXVj4ka+Pjd2w4Y6XO7dPlMBLa2THxM/UZUMBASd3+opm9g0vHF6:h8r4pr4OjnR/CBAW3+opm9g0vHF
- TLSH
  T1B8967C23B19150EDD93AC13192975233BBB5BC501B21BBDB2154B7702F72B911FAEB28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  lib/py3-windows-x86_64/librenpython.dll
- Size 20.6MB
- SHA256 78373093e3e7251a38af5134b735e5f2dbeff21ffbfb23d200e29c16947cf150
- MD5 4ba9ca59c38e5a3fb014244525264415
- SHA1 333c6fc95a9c2e60a48f73574109bc28ce2f30a7
- SHA512 7508900acb42a2c68c709b7088ac07060850de1a2f47aac699e5acb4cddad95f3609c102adf43c997b33ef962e4b6261c0c81461b1a337f26ecc5c147e947558
- SSDEEP 196608:aLYOpRrHtlmfym6MZQ5B2/8YQa9bWCg+y7QfHQGWFuu8:mYOpRrHtlA76MopYX9q+ycfHJu
- TLSH
  T123277D4BF05254A8C586D174CE2BEB22FB65784C4672799F329457B03FB1BC0AB2AF44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  lib/py3-windows-x86_64/libwinpthread-1.dll
- Size 344KB
- SHA256 00d784e7e002c1b01f3146c87f30030f169843988f87c9631cb2df211979286b
- MD5 da67da022bbc1bb9409e3328c1cb64e1
- SHA1 e1fd29f4256d7066f05d113cb8e96e1aebaa38e7
- SHA512 24ba4936ff149f0875b3e4c7e36e80f941130faccd4d6296d68c8af8b0e647c37d0822d477218ab0b3d4b51f24cd1dfa1ace54adfbd175d122036c3a7e787ebf
- SSDEEP 6144:Wo14rtZLc1fPm3YjZxgMOKSjkPDNjYBlplydMofn6cHqq85l:Wo14r/cBPm3Yg8SjoYvplydMofRHqq85
- TLSH
  T1E4744B8BE754DA7ACA1146318CBB0B097337D04067979F5BAB2CD2783D8BBC4DD99608
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  lib/py3-windows-x86_64/nvdrs.dll
- Size 14KB
- SHA256 1584412aa36e14bca2b2e5950ee3d111e5b9f8c13d0359075be5eab7406a0ecc
- MD5 e3df1d5ca1f09db3bfd2651952b8e3c1
- SHA1 5bfa88c35cfa23fc7d23371d5d8c2d45a7bec251
- SHA512 eff97ea5e4c116f955bb363270a24080b25d1cd1cb3d642f1117372489d215859d183380e3125428a54a544ab7af080dd500c9b8a4a3dc7c8844e2bc2ab40069
- SSDEEP 192:FKFj3Az2SjQ0bnUdPIPKPpCxeELcNiTw/dUfYa2GzEfw9v4Q:FKejQ07KPUKueELcNiM/dyDzCw9vj
- TLSH
  T15762E7069B5524BEDE4AC17FC2771762FAA0B960076219C70371F2650E71FD42B3D8AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  lib/py3-windows-x86_64/python.exe
- Size 101KB
- SHA256 fe4780b4f6edaec8594fbf89aaee7fdd17edeb305ff44e1de55ce969a318d9f7
- MD5 854736e905faac44c6e2746fedc67bc4
- SHA1 295a01384c2457fe2d7a65972353a8918c3c98d5
- SHA512 d58d9ab11acc410c647dd38561179c79f0350be076654b2792c0107fa34f1db9e7ca5be3a57b5cc8d8a502988e840166ff62b7a634965952a0051b5c5ea70922
- SSDEEP 3072:LO+3Yj+8JlFCumUbyJlKP8HRvkduTK5Nrh2o9Dj0fmoQ:i4Q+IFCumUGekHRvEuO3go9kfnQ
- TLSH
  T15DA3F10AAF5615BED921403FEAA70562D7B0FB6223911CC71211A7311FB7BC1AD374BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15
- Target
  lib/py3-windows-x86_64/pythonw.exe
- Size 101KB
- SHA256 1f3b73d2c092af9b11d0f8d9d861ff109b76b34a07b86290f2e5e9f445d28082
- MD5 cde709f80f7912843aa52cf350c30818
- SHA1 cbb1701b4078d2aed7eebb10cbdc3d62a4544839
- SHA512 bae92e3fe6a9ed6fb9863ddfc008dbced13893f8f372f038936abdde358e002860225578cad935b4b8af0f2042f48acf9feaf0c8c8538e20e3c6d21a58817587
- SSDEEP 3072:8OI3Yj+8JlFCumUbyJlKP8HRvkduTK5Nrh2o9Dj0fmoQ:pGQ+IFCumUGekHRvEuO3go9kfnQ
- TLSH
  T1EEA3F10AAF5615BED921403EEAA70562D7B0FB6223911CC71211A3311FB7BC1AD374BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  lib/py3-windows-x86_64/say.vbs
- Size 336B
- SHA256 b253baadc1fbdaffad5ea232080cc731c262779e8d256e8a57f7eb5a684a1640
- MD5 2bb7b68da76cd3be900723983a819069
- SHA1 8e3accc0203b203e514107f610cf4bca1a174434
- SHA512 674b3eb9b09fc8957a7a90239270bda61d6e7de14fe9df9a2a25ddda9f36e952046c7f5e755d56f81033157dd699d19c89a2b8940a30ab10d131baacff842e03
- TLSH
  T125E0260EAD22A2968012800314F5C45E4AD8E52BB20288CC3CBFD0E72F0AA07EE71840
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  lib/py3-windows-x86_64/steam_api64.dll
- Size 291KB
- SHA256 a3ccbe0f56e4af7a06a1279bc5b45bf4893caa67e5467cb5df3b3f681fb850c0
- MD5 cc7470b39ac697d9a9d2d43f5c30093c
- SHA1 542d7574b76c16b35912fa8f6a4435b44525aacf
- SHA512 ed84c34b4c3c7ba95418b2d582bc2dea1ca771e38f5abbd400f0d06ee897ccd47fd8901f7ab3a709340d4706c1fe2791473e6d98a1ffaac6235927b1f758e13b
- SSDEEP 3072:D8Y+BDOgGIWcXSEJeRhqTMdU55UuT7+7JtN3RUOw65lhTbCMTiGu2ZvA45T+yq+q:DYPNrQheMW5vTKxRJ8TyKyqO2CMNOvi
- TLSH
  T141545976A2750CF4E076C23989565E0FF671744B23219EFF226053368E57AC21E3BBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  lib/py3-windows-x86_64/zsync.exe
- Size 92KB
- SHA256 dbc39d1d4ddc8c744e7840a294f906920c532adc0dc9e69f7664a91b55b2ff77
- MD5 2e9d3dc697a2e1fc5c5be1f7e04508dd
- SHA1 0f72289874472de314aecefeb5457812f1c72481
- SHA512 d938a7d94c869b3b67c70d016b10c6a3c79fc3e928f3471a829b925041feb192f2f4d77993cd450d8246e0a4eec94f2275fd44ffbb931e15a5f9e74624dc0d16
- SSDEEP 1536:/9yPhoPyrELhNx4xKM87bsp9G8e5VuSYJadGo7/TjX3DvrnAvp3ITPvsXXlgpoIW:KEL+kM87QpRKuSGI/TjX3DvrnAvp3ITn
- TLSH
  T1CB934A89FAC75AF6ED77097044D2F27F8730E601C414CE92D748DE8AE973962281A6CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22 behavioral23
- Target
  lib/py3-windows-x86_64/zsyncmake.exe
- Size 91KB
- SHA256 bb9c90f996a54a6c697f41a7897eb924e90e18a07746b612bcb5e034892f260f
- MD5 ac2119ef9d738e1a3b7f83c40616a238
- SHA1 d3f4e1675e39318e3ad9fa62b1144da637617234
- SHA512 f1274568f646ed807e01268f01407349f4b7d3be3ddc5bea29d44bc260847e6a45017809406632f65fbca25d3c7a96438356bf41b3c71f0f9360e85fd091ada5
- SSDEEP 1536:4bjZoLhn7LOuW35VgkJFNqGTfJUM8EoqUxvr7fYnPHv3jz/jDnTnbPr7Hf/TLzAJ:4/eLpW/gS/BUM8EIvr7fYnPHv3jz/jDo
- TLSH
  T19B935B4AFACB8AF2DD77493084D7E27F5B30E100C514DE9BE388DA46E913932591A3C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24 behavioral25
- Target
  lib/python3.9/__future__.pyc
- Size 4KB
- SHA256 58e9d4577a45e253caf95fee0d446581b0caf0a3d3b08f4ab09868c56e53d264
- MD5 08d42ce57d4c079f976050586d0d44bc
- SHA1 d22d35f0a1d95ffbfda38385ba64b2686eeb159f
- SHA512 ea428d0e6240337bc30e4110481b955db2deee23a3afa981f894dd13c3cb0194def39f60572fd549f1882521e02ed44d98448f86f718706f5d5a488f9b405376
- SSDEEP 96:Sg1NzUuGd+P2sKNwW8D2j82xnCg8Q/Ks/qN+Bj0ui:n4BRd8D1YCM/KsSN+Bj0ui
- TLSH
  T19D81750A69454AAFFA06F2F2A2C951C14F59C3BD2F94603A355C52443FC38A2937B89A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral26 behavioral27
- Target
  lib/python3.9/_bootlocale.pyc
- Size 1KB
- SHA256 633c8d3e3be06febfaa04682947fa9df0762780406d396b69931020420c4915b
- MD5 4f8d06162f243842f03e04b6db2ee50c
- SHA1 4ba516afd5116bdfa205df0cb883859000b23b53
- SHA512 cc1a89997a820a0aeee8ae301abbc17b95138b2ff7a6cb7a000fe005e419c7bd202339d4c4e85fc178edcbb131b378dfc4d7446079cff6d9a83af1bdd13e48b8
- TLSH
  T1EB21FE860F015E5BFD20FAF466C5822406B9893A0E1FB95A1B15C27B3D0E25D6E615CB
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral28 behavioral29
- Target
  lib/python3.9/_bootsubprocess.pyc
- Size 2KB
- SHA256 7d870f23c3150a7b6bc0b9d6a1a6caa9d0779dc8ff8d2880f7ccda123c194efd
- MD5 7ce6d922ab7a236df1d5e6dc6feb5aa1
- SHA1 47a4908816886e11b94b0cb2c53f4ce50008db1c
- SHA512 b7d054feddd44aadbd8880ee3885ae9e5d8bc6cfd224315a730f85bbffb7c304666b3ad59988be466fde705fccfd4ee7c7354036ddc9ac70ce1a1ee8747d81d3
- TLSH
  T11D4195DA52B924B2FC61E27F611B02720FB2C539430A5B20291EF9260C4E9D0EC933CE
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral30 behavioral31
- Target
  lib/python3.9/_collections_abc.pyc
- Size 30KB
- SHA256 fa7a12d76d1ef6f24093315993f18d7f32b2c5900597b72967da35d6de5f8235
- MD5 2d47c76bb2e91f892d5cc8474afe55e2
- SHA1 0e3aa5a2841e1c304f189222f021cab351f773d7
- SHA512 0828952f7909298772204663ac3a4739d581fff7e809a958919fdb5b2136d1dbf6003419ad9dc542bf37682c4d00ebf58022a54f12e29bce2fc04b51435b8d2c
- SSDEEP 768:pGJwavbRORmFHGyiajSVnsximHAC6t2TqBuuUBlMKzR:uLvbMRByiRsximHAC6tNuuUBlMwR
- TLSH
  T1CCE262C1DEC2ED67F865F2B540760128BB24D2E3B23D8297350DA57E2E07E8099F5D94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32