0f8dc9cfecb3da05eaed47def51ba2b21cb15a5bcc1ebccf00d669c9ca8ff005

Sharing

Copy URL Twitter E-mail

General

Target
sample.zip
Size 5.6MB
Sample260628-ph7m3shs9m
SHA256 0f8dc9cfecb3da05eaed47def51ba2b21cb15a5bcc1ebccf00d669c9ca8ff005
MD5 a804889b333dc601f1e68f3f372f7f36
SHA1 abe18afc46fc80f37f18d9dacd5d56e9f0419269
SHA512 68cf67aab3365d54d664000fbdd4f0c6ecc1d4c734050f8e87e3b33fd8a5ee351a5da0e0dfd45fafa47381632dfa04ce0e05d818cc6678365e13da6a415a5774
SSDEEP 98304:wkGYDdiQ69HnphAgjHFhzT3JTP1MKMrL95Tio/hG55Tio/hG35Tio/hG8bewIwjC:5GYDdZ69H3ASH7T3dP13uLzG3GxG8bed
TLSH
T16B4623943AE0746BD06B767221E0413E1860BFAF1820A7EFF0498E564A97BDB475731F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  beautifulstrugglefoundation/app/src/commonMain/kotlin/com/example/beautifulstrugglefoundation/ui/HomeViewModel.kt
- Size 1KB
- SHA256 770c008b9f3fdec46b47fca0f0a90e376b75503109e411fbcfecad58781f5d1e
- MD5 93ed851c8afcae0a727fea7087cd595c
- SHA1 d9a4f4d8cf2a81108dd23f317c10a2b4cc463dc0
- SHA512 8e338034acfa918ef98abd326cc975d17037c493e60867af139b78a6b899ea5150bef79203f2c8e2bd2c154d10cdc4967b4f4dd90a671a0ba3e5211d1cb8750b
- TLSH
  T14E113856625118084532BFB2AD1D10B6AF6177B32BD614D4BE8CA2B11F3C8889E5CFB8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  beautifulstrugglefoundation/app/src/commonMain/kotlin/com/example/beautifulstrugglefoundation/ui/auth/AuthViewModel.kt
- Size 2KB
- SHA256 0acabd4fce84f54e3dc484ad70b01720bc5e7823d2f071c0c9d68ad8461b8bb8
- MD5 5a6857ef47237631bdc33c5f3a942d44
- SHA1 45520620c0e1198742874d3671d994cb51a0f10b
- SHA512 0a87b7ab12ca822763185059717926a94d5f5b0d64c3729edef40fdbe353cf5584f3cbfc482f8e20aeefd869677d03bf77681c5b6aa930974969239d4c7fd57b
- TLSH
  T16541AB056A50145885326732EC4A11A0EF7627A71AA2A0E4FD6CA1B4AF38D05BC99FBD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  beautifulstrugglefoundation/app/src/commonMain/kotlin/com/example/beautifulstrugglefoundation/ui/spark/DailySparkViewModel.kt
- Size 1KB
- SHA256 897d107ca208c486bc6be0e7411483b5408df21226348854e084a701d36d7254
- MD5 e65af9ab812d3240e2d2f8b29568f262
- SHA1 a5bcaa3515e158c3fb7ba9742bf83fcc58662974
- SHA512 a0d6b0c7402df367ee19aa39e743ddf6d2aaf8f6ed13ed52f02273d0858acbc8fffb82fa45f4eed3fb60241db19af4fe0597fc8ac7aaf888eb123ccc1b7a5f44
- TLSH
  T1033120907311041119325B63DC6750A5DA706367ABB2A0A8BC6CEA201F3CD09F2BBE2C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  beautifulstrugglefoundation/app/src/wasmJsMain/resources/index.html
- Size 728B
- SHA256 9e63010e46e4385fdc1a16553235430ec603152aa2a35529df8b26f2346ba70e
- MD5 5a5e6b119c400e3b398dfe9c813d02c6
- SHA1 d2320dce16acd6eb8b16efb01984e3c1f1792623
- SHA512 54decfa127299648b988611a797b212c33cc6b15610eee74870f5f50ec5867f6bbfac5d7a9265cacd6f9f5286eba787096a79e4287732c7584a23eb102041067
- TLSH
  T15A0178655DC14888007683B24EF1E13CEA9311A787421A007AEEB1631FB6F0A8CE36D4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  beautifulstrugglefoundation/deploy.bat
- Size 521B
- SHA256 92187fae373cd35f4ef73ced84a3f2b647e3784d89f19eda269a2eccb95a2d87
- MD5 d8dace3d8a7af81a2c8991be4e711a23
- SHA1 9777cf8a7a6539495e46b19f0a38e5e3a651cc2d
- SHA512 a5f2ed30dcfeb7400e2be6b9d7df7b54d099903b1a0ed46bb113f2053a0bdc445f86eb2631d9e3b7e161d8758f132edf32b05c4cc3d4c9ed01fb731b005277ca
- TLSH
  T1BFF0599AB42C50B4A67A497090B200AAFD06066F02210D3AF19BD5192F3B68AD1FB295
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  beautifulstrugglefoundation/gradle/wrapper/gradle-wrapper.jar
- Size 44KB
- SHA256 76805e32c009c0cf0dd5d206bddc9fb22ea42e84db904b764f3047de095493f3
- MD5 00fbfe071a292b2cf0bf1613035eef10
- SHA1 9b90d32f1e62028b17ed508b43a9f7056bc0356b
- SHA512 dbf73c3090ae540006eb206a5965a19c286142e1a4f7e1bc8604b680e318b52e6b35b60c9091dd70963105be48ddc98575436e96e756c70ecc48b06034ca4b48
- SSDEEP 768:u58feQ8OP/QRfq1WQaAgv8p/KlS/ypSE0lUmMm80HxCxJLqGlbJ+THM2sgB+S73v:m8Fn0y1WMyphPmMm80HEJmGlb4THMWH7
- TLSH
  T16C13AF2AA9989D28D153093F606B8640A721E31D449DC77F1EB9264CDFE072FA713BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral11 behavioral12
- Target
  beautifulstrugglefoundation/gradlew
- Size 8KB
- SHA256 3238afb2aed5cb16eb7d6718077e7138059108f007b54179e9cc157c5a6e0e89
- MD5 266606e78242737ef3da02a80ea0564d
- SHA1 b3c51f507db69f76b64f34c24210bcebdedc61d8
- SHA512 754efec61b54eff318013058c4a309e04f67f245c0aef9b54bafd0880a813866cab816a3aabc1c8e8be2c54ddb497047882c14f9455603034ef4648af45001e1
- SSDEEP 192:Sjm7H8yzJ1XnRy2305hI+vUHD7oRDe7PRL5WW:Sjm/zJZRy6mhb9RKRt9
- TLSH
  T12C021A6357802374074506776E9FB0EEA72162BF1F83291C749C960C373A92A61F2AED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  beautifulstrugglefoundation/gradlew.bat
- Size 2KB
- SHA256 1d297e00bd21de3ace22b4d7f2de1f9dfa858883d66bbf7c1ccbecccec8f4f3b
- MD5 7dd1a1fde1043efef3d624e3cb720522
- SHA1 33356fb0e882906e1b013ada80fd0ef1286c79f9
- SHA512 c865ca86c88d844dc59c7313885846c0105ea50326a13569b12e9b7b69bca009cd2cbcb8a83965cac219043a568a48af15e5c5e5e32547c127b2e77b2b840134
- TLSH
  T1405155BB7B4743761FBC27A67E1C4982B212A2662F4FA30CB45F850D713174A51C2E9B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Executes dropped EXE

Loads dropped DLL

Enumerates connected drives

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18