80b5b005249287484d7a8c8ec0c0faa6eb3fd7f02127bc677a89a765f6c01f29

General

Target
.1337 UID BYPASS OB54.exe
Size 18.3MB
Sample260702-w3ksdahs4p
SHA256 80b5b005249287484d7a8c8ec0c0faa6eb3fd7f02127bc677a89a765f6c01f29
MD5 c181dc2e814dac72c6666e4e06b188d5
SHA1 f77ec30df01415d4c2e4d287d183838d4023c33c
SHA512 18c40edd08a356cae2315973dab2dc759c6de001ffe92000ce262d17243b2716b01424b1ccb99d476a6f2e3d7f4fe0a4fb8de6017009f373a8461d3c5e6da9c0
SSDEEP 393216:tfNmkSqvlXL/9HsiQ4rxu5lWftYJMyk1lxp/8:tfN3v/iE/
TLSH
T1DA179D2159B99198C66BC578E7520B42EF65315403606FFF20B9CBF11E67EE02B7A332
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  .1337 UID BYPASS OB54.exe
- Size 18.3MB
- SHA256 80b5b005249287484d7a8c8ec0c0faa6eb3fd7f02127bc677a89a765f6c01f29
- MD5 c181dc2e814dac72c6666e4e06b188d5
- SHA1 f77ec30df01415d4c2e4d287d183838d4023c33c
- SHA512 18c40edd08a356cae2315973dab2dc759c6de001ffe92000ce262d17243b2716b01424b1ccb99d476a6f2e3d7f4fe0a4fb8de6017009f373a8461d3c5e6da9c0
- SSDEEP 393216:tfNmkSqvlXL/9HsiQ4rxu5lWftYJMyk1lxp/8:tfN3v/iE/
- TLSH
  T1DA179D2159B99198C66BC578E7520B42EF65315403606FFF20B9CBF11E67EE02B7A332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral1
- Target
  costura.dll
- Size 5KB
- SHA256 669478d9ba0c65f634896bef2598d0e4daebcf322dfdb80c8bcb566197aa407b
- MD5 eac8d8c1d89a9df0c2cdeaad81b52330
- SHA1 94c545ed2a1b2485cec9102b7a75954f4aeb768d
- SHA512 ca1abea53ac90af310b1f130926ef6ba66f1bf465a8ebc2c9d20d7f4be59ad0ccaf439c50b8beda301d6275d32a8c32754a936c2b415c1c74871645eb59ae377
- SSDEEP 48:6bc82nhx3BTjtRiaAVLE04iZ6iMtTg704Ela7TJFu+6SV2H7nAWk1qyFVh2Ibt:GiHtRYVLELYvEmTru+6w2cWK2
- TLSH
  T108B1FC2467B82737EF7B8B7659A353814774BE50C92BAF1F098562066C363908D31B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  costura.pdb
- Size 7KB
- SHA256 5365d3084158503be4c4ca39f0c6336bbdfbae204cd9d26734114e65a48c8def
- MD5 d48daee983649297de5dd71402177dce
- SHA1 333d3f968665e249db702bdac57c8d5405c26a05
- SHA512 52c382f8b29c0556f4a40ab26dcb949cb66af42d34502e2b981985e6fe21c2c171fd45d59a1b4590269ede344eefe4c6bcd29ed0f5bb6e4eac2d69950d2cd87b
- SSDEEP 192:61zyMDX2XDninPI6jMai+NLy5nj4SCBg5MRkCIFQkC8g7AHOuXk/N/8Hu0T:61WFzePI6jMai+NLy5nj4SCm5Mz6QkOg
- TLSH
  T1C4F1B33F6748C463C85A5A724521C49CB67343202674ED78F3CB2A08EDAF699C7B5B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3
- Target
  guna.ui2.dll
- Size 2.1MB
- SHA256 6d876b257a97995d21072acd44580633468516121145cc218277edc18f971030
- MD5 58459aefb74d5ff786b9efb982d44eab
- SHA1 584f851c9824a27f4e2e5594ac206f8b165adf72
- SHA512 80e975d2726eb1e4515a79f3ced422e61315f9b2bcb87d054aa654c1885c12c2a16f75da9aba6f8cd2dd652bb85da50579d1e618f10fab1e50c0cd29f37c7b55
- SSDEEP 24576:mecRcAIrcai1e9RcNiCljNAXCITob+HgbY8DkUKAMDitqTwCTxZmxV7FdHQ/jzwQ:3AIKyo+HgbY8DkRmaZ8V7FyH
- TLSH
  T133A50A147ED4EB27D16BCE33D5E24011E3F1E5A32AB1EB0E76D35768184234A788636E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  newtonsoft.json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  siticone.desktop.ui.dll
- Size 4.0MB
- SHA256 21eecaf504b7fe787a45f4aa8f8f36dacfc3ab1d75624dfb41827cdef2a9a589
- MD5 1582aa45d981e0e569c6e05698642b30
- SHA1 763506f312a186c55a04ef6a16ad7e867c394097
- SHA512 278a7a4e2b9d82528200b9f92244db3f228187d15c36fd169deb927e343bc4d0bb29c9dba496f86558aea4f4deb44d1e47a41d5598c0b375d99ad9fbe99cec34
- SSDEEP 24576:UCCxPAT4L7h3M7O2MLBSlvTh/aOBteUePU/DU/GHQYazK/DkWoql3zjbndHQ/jzb:WuO2MIThZNwewYDoyG
- TLSH
  T12E166D013BD08917D16EBF76B463141C97F6F804E6A7E74E7995F2AC2B9B3684802363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6