da065f7e459fa75ec5253f0ac5907886d6928feba05cb679a7d7e02ee61f08cd

Sharing

Copy URL Twitter E-mail

General

Target
73pm2r0(1).rar
Size 4.8MB
Sample260628-ykqa9adw8m
SHA256 da065f7e459fa75ec5253f0ac5907886d6928feba05cb679a7d7e02ee61f08cd
MD5 1b98e1a60a3d669f155e2077d1e016ca
SHA1 118a2f36f31bf7c5182b69eebe3e0fe1e27d6fb2
SHA512 3269d5b3ee1d7bf0fe588380d2b785961f9cb6628fa1a0df31fffb2980433efaf238394e9cbb13862fd5ff2a41abb4b31e9ed6c5a79b9b142e7bdc615ea58fb6
SSDEEP 98304:slUnpg7TDYviLPwORUEZV+NWUpz1BVbl4guAchLsczuJB6:sNisRhHIDPn9KVZiB6
TLSH
T18C36018B94B540571F2C681BF2C1C611A9EDC6C22B96EE00A6DF87DF5C4516A32F7A0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  73pm2r0(1).rar
- Size 4.8MB
- SHA256 da065f7e459fa75ec5253f0ac5907886d6928feba05cb679a7d7e02ee61f08cd
- MD5 1b98e1a60a3d669f155e2077d1e016ca
- SHA1 118a2f36f31bf7c5182b69eebe3e0fe1e27d6fb2
- SHA512 3269d5b3ee1d7bf0fe588380d2b785961f9cb6628fa1a0df31fffb2980433efaf238394e9cbb13862fd5ff2a41abb4b31e9ed6c5a79b9b142e7bdc615ea58fb6
- SSDEEP 98304:slUnpg7TDYviLPwORUEZV+NWUpz1BVbl4guAchLsczuJB6:sNisRhHIDPn9KVZiB6
- TLSH
  T18C36018B94B540571F2C681BF2C1C611A9EDC6C22B96EE00A6DF87DF5C4516A32F7A0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  سحب/node_modules/@discordjs/builders/dist/index.js
- Size 151KB
- SHA256 066b68cc73793c5155b3c78828ce6d2534765a6d268229e4102ac8fe8952e95c
- MD5 82e51a3f0bbef4c696785215f3a71998
- SHA1 469032c41dbf2003a8e06c8c8705b8d8d0802cfa
- SHA512 6918b8061bbb9242f38406e72d763fcb6e00ab21f93e85b83ea8a3f24e7d7302adca534218d2efe70e429eb508b073ddcb74a919bd70d95873a945b9d25f0314
- SSDEEP 3072:4PHi8ftIlegV64e2RmO+Zn+2y1Y532Q8GkkZxJGpw/kf3Dz7pOxWDfbZjSfe9+gV:2Hi8ftIlegV64e2RmO+Zn+2y1Y532Q8D
- TLSH
  T129E383A23AF612D0049720F40B6E5583E1F6E30FA686D841B4AE87F41F45BF496F7E94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  سحب/node_modules/@discordjs/builders/dist/index.mjs
- Size 143KB
- SHA256 f315b40884ff3c0901562fb14e6ef226c7bf39883b28b800d8653b75965b472b
- MD5 4c6a7ff14ae2e0f13640a777e52342dc
- SHA1 d5307372405e38403ae4efdeaa0e08b71e7c4b6e
- SHA512 771254d0dd02bc81a7516de3c5c6b52f996ca489200a629e5a965f39f1600b249b0f628b8a827295dfea694ed10ff2adb480f38563d4cf40af8146a87c45f78d
- SSDEEP 3072:qHi8f0IPeqVt4e2smO+unY2K1W5S2Y8Ggkix+Gre/ofbDO76OQWDfQxj/fQ9+gVf:qHi8f0IPeqVt4e2smO+unY2K1W5S2Y8s
- TLSH
  T1BAE383A17EF622D0059720F40F2EA483D1F6E30E6486D852749E87E45F46BB8D2F7E94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  سحب/node_modules/@discordjs/collection/dist/index.js
- Size 16KB
- SHA256 95cadcbcace830d178507d831f3a154c2cdbe26a6a5434e08d989c0aa6773307
- MD5 1b0a36118ba7cab64c855a4ddf5f86b0
- SHA1 1ac3a8567a27547c963553631999cc689cdc55f3
- SHA512 11799096b5f4293a901fc538793cd51807eae49c77a3d35f3c359a5ccb9bdae965d920bdc453ea5d3da6691c9a8e82873980e4102094e9edd2b76d1c5010583b
- SSDEEP 384:wYsLHqFf1q/tqIwP11i9S9ncXTCcXdKZvgZvdcRPxaTTxTqFicesyOmlTRtDKv8A:wYs2l1q/tqIwP11i9S9ncXWcXUencINw
- TLSH
  T1B67230553AF762E142FB20781F4B5186F324A41B71199C687D6E43B0AF41E3486F7EAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  سحب/node_modules/@discordjs/collection/dist/index.mjs
- Size 15KB
- SHA256 b0a209bd66970dab7a6db254f55343374bf7f61799f92fc5f5a1f592fbe03211
- MD5 87aaa6361629a24b672c2bf71708a519
- SHA1 587d9eec99efc180dcff0989490f12d017066865
- SHA512 106adf12524e9d12f820d315db401e1ad8639977958b13849cbc52822c2860a408ab668064b6ec291369272858611f39e00c8efdd838a872bc1c340746958bb4
- SSDEEP 384:BuFf1q/tqIwP11i9S9ncXTCcXdKZvgZvdcRPxaTTxTqFicesyOmlTRtDKv8XYpF2:Bul1q/tqIwP11i9S9ncXWcXUencIN+rA
- TLSH
  T14E7242953AE762E252EB20780F4B5186F324A41B71199C687D5E4370AF41E3487F7FAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  سحب/node_modules/@discordjs/rest/dist/index.js
- Size 50KB
- SHA256 e9fb10260f7641115c32b2a7d00550bf3fe5163f7d55f248f3414a77b2639dc4
- MD5 2d0ce19becf04ab6fb7637a20e4d9ff8
- SHA1 b1069457229b51093f171a5fc1c1a2ea0641e2f1
- SHA512 6593c8996947c6ab65428bdaf4b639fa7fe847fc30b11405e9509587bc3733d530b967d43c7aa0aa3ea7e60dc3afa527abf2a3ce6a16198623dbc43702b84093
- SSDEEP 768:wYscbiyGgnCDaXlcV/P8lam16NcamW5kDdLb5ZIqr4joWA8gQT:wYscgTDaXaNm16N7mWyDZjV8gQT
- TLSH
  T1F333E8962AFB13A1066760ECAE0AC141A234E92F760ED85478DD0BE41F4E670D1F7FE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  سحب/node_modules/@discordjs/rest/dist/index.js.map
- Size 109KB
- SHA256 80bbaefdda37435cae17ab2d0a9d512b9f8badaccd410decaf9ab59a1d70a6fd
- MD5 1665ca29206b3ddfdfc249de1b921724
- SHA1 ad6217eee09255413869bba80be75e813431630f
- SHA512 3da83332319ea778f963f91e3ae5056feac7dcd267a5f5077c290b8b5d2400b8a4499c4ec9c149617b28058d4836981b2df4df2a8a276eed0655e26dae31d25e
- SSDEEP 1536:kpL6P7ic0bC5aeGZH0pF1HQ8YXaLUHhA8L8j5t+D2oO3U:H0bpoYrAA
- TLSH
  T126B3A5F211BACB35995207DB790D81910F2BEC6FF318902124A8BAA9118FF15F167DE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  سحب/node_modules/@discordjs/rest/dist/index.mjs
- Size 48KB
- SHA256 64f2bd9bfbf2708fdb8c8d58cb5a1f4ea64867b6157a25fdad1e25dcdedebeb7
- MD5 822a549b4322f1841f8f8d2580842b79
- SHA1 0e50dd692b1bcc9faaa677150fad5328aeaa35e2
- SHA512 0f983e1db4de770ae656288b74ae1e7b26b1915ace9762fb560a07bafdd5c373ebbe3de5b953fed874ea5ab32775e9444b3f82587b16525cb77cb33bf328d4fc
- SSDEEP 768:BhCimXgnCDaXlcV/P3lam16Ncam0Dd5H5ZIqr4jgWA8g3:BuTDaXaym16N7m0Drnd8g3
- TLSH
  T12823D7961AFB1291466760ECAE0AD181A234E91F760EC85478DD0BE41F0EB70E1F7FD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  سحب/node_modules/@discordjs/rest/dist/index.mjs.map
- Size 109KB
- SHA256 87d6abdab6e084d17936b80aee1b35fb40e87a5ec2e1e36e46076741282db421
- MD5 dffc1331fb183955277462aba176334e
- SHA1 c108705c1deda62663c075131c868ed21368db29
- SHA512 76d0fd5f756a8dc78dee9e0f096e2ba88d3c7fef489ac044f2e32923b275b048e0eb7f16e3254ee861cb664e65619ec07f417ce27145229a6709cf1530ede3db
- SSDEEP 1536:kpL6P7ic0bC5aeGZH0pF1HQ8YXaL+BhmFL8jNtCDRoL3E:H0bpoYlm1
- TLSH
  T1F3B3A6F211BACB35995207DB790D81910F2BEC6FF318902124A8BAA9118FF15F167DE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  سحب/node_modules/@discordjs/rest/dist/strategies/undiciRequest.js
- Size 3KB
- SHA256 bd5310a5f1c1131a26e946e6420e1ce6850d70ec74e4134919d02e0a9326fd19
- MD5 9170f66f71df632580419316760eea57
- SHA1 746d54d9743d7f38d135f6dee2423d97d3a76ee0
- SHA512 966cc26b8c105429f1eaae4f7ba355d14ffa9185a3d2c9ddfae153e6d5e72353b78f3f83c8d6ed1f401fee1ddc119a48fbc7287dec402bddaa1953a3b3315695
- TLSH
  T14A51214619F172190B22F9D6A03FCA1AB7A9845211A9CC30FA9C56B01FC50AB81F5DFA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  سحب/node_modules/@discordjs/rest/dist/strategies/undiciRequest.mjs
- Size 1KB
- SHA256 aa034db759eff4fa661588cb286d9055024384e8b9fa6e0c5593473d0162983a
- MD5 630e0f0650d31e70f282383e48b65d29
- SHA1 0ff1f56a629413dfdc1bc13a65bbda74c23ff068
- SHA512 4ba6fee30c838610ad7a398d8d6343d5947f2abf1b22e07a61f71f8110c406d103bfd6fef10d75da3f2b92a12e1c03c89a54ed07ac54f443b5770c8def92e7d9
- TLSH
  T146410F451DF372020B62FACA941FD51AF7A8888324ADDC21F54D1A202FD90FAD1B6DD9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  سحب/node_modules/@discordjs/rest/dist/web.js
- Size 48KB
- SHA256 70d8a537d65ecbaec5821ee9f38b7a1db18754d04f9beeb056d60e6ec1da8f20
- MD5 279d775ece1379716404f8f94a06a01c
- SHA1 41ca259397dfbda2705658b4c8340101451b5861
- SHA512 542e3f5799ddb571854d125faf8128d0aea9f3954cab1b9242be59be7278aca5af2f0bbff61cec02c3069a2d83cda66af120c9bf72ecca757cec1fc7137aaa49
- SSDEEP 768:wYsGyGgnCDaXlcV/P8lam16NcamW5kDdLb5ZIqr4joWGswQ/:wYsG1TDaXaNm16N7mWyDZjbswQ/
- TLSH
  T1BD23D8962AFF12A1465760ECAE0AD181A234E91F760ED85478DD07E41F0EB30D1E7FE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  سحب/node_modules/@discordjs/rest/dist/web.js.map
- Size 105KB
- SHA256 93d0d1fec8fb6dc30d2e40df23c047bfeea674d371151b811ab96aea5ead0678
- MD5 6dc3319b1c2a6d6493473ac6c59d0f1f
- SHA1 f874f79b5b2bd0c0a4d85ce7d3ede2ab30e2aa9e
- SHA512 f500f743dada4ff80547d658267de0ea8193768982f8225289a8aafd81488368481d54700de5f27acf49952a7be01e779690e05beeba2842e284af8418866c85
- SSDEEP 1536:rpL6P7ic0bC5aeGZH0pF1HQ8YXaLXhA8L8j5t+D2HB3I:u0bpoYiAI
- TLSH
  T126B3A4F211BACB35995207DA790D81910F2BEC6FF318902124A8BAE9118FF15F167DE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral25 behavioral26
- Target
  سحب/node_modules/@discordjs/rest/dist/web.mjs
- Size 46KB
- SHA256 74f5793de36891c4f62872a8402acc34b0c3e61914110d531066065ef2b793a5
- MD5 550b0a3bde64c2e9c9df749a99840d93
- SHA1 6243612d809db7a97dc07d60ab8973c9def330e1
- SHA512 603d7679968fbe417cc083e8f3222b406c4d92e78f9440f74732bc4b32207f9f8592c50f5358c93657ea0216b25c50ba5bd2b59aaf1ed599e4178047fc425113
- SSDEEP 768:BxXgnCDaXlcV/P3lam16Ncam0Dd5H5ZIqr4jgWGsw7:BFTDaXaym16N7m0DrnDsw7
- TLSH
  T10223C7961AFF1291465760ECAE0AD181A234EA1F760ED89438DD0BE41F0EB70E1E7FD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  سحب/node_modules/@discordjs/rest/dist/web.mjs.map
- Size 105KB
- SHA256 d09f8942284b7d002ba292a716a0dccf27552460582906d96cadfe27ca103f02
- MD5 42268d7cd7a01c7425814b7250e6f325
- SHA1 5e6d5b2fc537f74cff48b039f64f2f2871bc69a3
- SHA512 0de0759dbe71e217195c49eb5d394a5311b12c2cdf072fdc054ccb8776a0e01538e3f9f648b654becb1360815113268a8eb8bf11f41e7cb22bbacd23e2548313
- SSDEEP 1536:EpL6P7ic0bC5aeGZH0pF1HQ8YXaL1hmFL8jNtCDRHq3H:n0bpoYomO
- TLSH
  T147B3A4F211BACB35995207DA790D81910F2BEC6FF318902124A8BAE9118FF15F167DE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral29 behavioral30
- Target
  سحب/node_modules/@sapphire/async-queue/dist/esm/index.mjs
- Size 3KB
- SHA256 62950b66997ef40bee05bb77a82b61d42037ef0e388770a9aae0cacde26f0f68
- MD5 dc04958c3c0f77274ebd7e81a449db0b
- SHA1 1afd119ba13228f8ec3da7cc7e32c758e736397e
- SHA512 4d140e6ed94a861af739e69c405fb07df4090ba1b64055b6a42d40e5c9b121ba8f9d4e3b2f9c8d6e070f62a320d2ae1d478a5073364f4c98d9adb5f066b7ce06
- TLSH
  T1F2812693EBFF22A2D05370F46E4D5042AA7D450E209ACC5C725D61E05F87B3143A5CB1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32