9165fe57bd2b590ca167874ade25e30dc0a685af3a8860c06a44442ad0d66ad1

Sharing

Copy URL Twitter E-mail

General

Target
bc-csharp-master.zip
Size 16.4MB
Sample260703-asdenag171
SHA256 9165fe57bd2b590ca167874ade25e30dc0a685af3a8860c06a44442ad0d66ad1
MD5 504337550a1b1cd02836561e2e723d29
SHA1 e43fafcf8fa6baf4fa44f8425b6fc82fc386a0b9
SHA512 bb83be61b4ab3917ab194078234849af832bdee9f71e2b94583f486203dbc0a6b04c08896272e070769a638b02c87170e4deccd5f25a65e9bc81846be52235fc
SSDEEP 393216:gjkcEbn5wW1tkELryR8A/aJPt5V5zH82+PRdv6bTFP/dZ3S4vgjmFnL:gjkc65h8ELrK8hHLH82+Pfv6FPlE4+mN
TLSH
T1730712599A0EEDF0DA9F72FA243BD246F922C13F17477B0717A11130498B1297EA279C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  bc-csharp-master/crypto/Contributors.html
- Size 14KB
- SHA256 0b0bbbcaaef00ae62c477766724ab1930741b86e7a59b9971b5870f75ae401c3
- MD5 914b7f725a52e03bbc53afbe3563d0f9
- SHA1 8e53d597a53cf6f5032dfe23d868792d097469fc
- SHA512 f32ec1f861ea14c12f07007133b1faf5abc9e3251d5c8adfc821c0e18183a93a918c7926e34e2b8fb70415cd3b23a153fa91f7d5803a171c000c6cbe1874afae
- SSDEEP 384:nRfhLUzKjjS2JWwgbhRfUX6115NuJRHgR:nRZIsjST4qH5NaY
- TLSH
  T1106252E393891BE72E8526825EEC7169BF3F6B0ADF94595B302F014CB7428510B6F1E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  bc-csharp-master/crypto/License.html
- Size 1KB
- SHA256 3185bdd6616115103ab8c7782dfae7067c9a8c2e00f94cf56deb8c2b3ef63a04
- MD5 b967b3991a8e3ec3c98336df511b1f99
- SHA1 079163971802c2a420a0d65fd775d3332b4f1280
- SHA512 25ae0416a5e34579892e84b84f197a881bd272e7a3d3c837443eaec9138fa82e1b4eab1944ed8413dff8438c53a9da4852b414fa86e6232a07737af22fc60330
- TLSH
  T17341337DBA62670305B2D3C47989685C110A5309735E8F445BFFE27671950A9F0F2B8E
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  bc-csharp-master/crypto/Readme.html
- Size 72KB
- SHA256 6be89de3b48276c6e1f6ff4b659521af9eef386a3da43c505d902b4d7dcead4d
- MD5 3beafd4d40f534fcc89b4e1f5ff26d54
- SHA1 09de0544a617b2a9c5695a017f4ec12a793aef48
- SHA512 78b809ce5b50c973bf86110e913d14907450ff12ea103b11a61a3d4220eeaf08c675da314796712d55e0284ae2920053bae07d96abf8d89a985475a36a51bd17
- SSDEEP 768:r2K8Wd1cXQYvfGGn948EoQe5AjkHRW3s6oFTz17gj/Co:r2lW3AQYv+GW8+sxW3Ep9G
- TLSH
  T18173850B19F52622035102535E66A3B26F1AC06BA39C7B1631DC521D7FC3EA48EB779B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  bc-csharp-master/crypto/src/asn1/ASN1StreamParser.cs
- Size 9KB
- SHA256 e7578fcb94d79d1c734609fb24c012628b3f4934f920f38134d7250162a5ef87
- MD5 93a147e395d0826ee2360ae2dcfc0e22
- SHA1 e51c2662f2cb2c01210b80b88a7957cc1c5f91d0
- SHA512 34380867edf8cdb641df0f1fb1f2dbf724fbd49b6a3fc648663031b894f5683bc1d49fce59142213e7d248eeb92d45e4fab1f9c751cc55db8b8888623cfa8648
- SSDEEP 192:50sJiYyZ6LTfNnZXW7cUGy6alJ36mR6AIS8g3Gg0VyL:asJ8YpZXW7cUGL2JqMjIQ
- TLSH
  T1521231151AB290BA8A93117C4F8ED4C9E93464172A8ADD307C9DC420FFC62A58BB579F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  bc-csharp-master/crypto/src/asn1/Asn1Encodable.cs
- Size 1KB
- SHA256 8ea30c441e5ab869948b06ba585cfbddd30fad49df7f69efef0138a0b1bca720
- MD5 f3dfd9453fa38564c90b494b3eb8fd37
- SHA1 e99f38ed52c661d4e3907946f8240ed8d41fd688
- SHA512 3a060b01639bab1fdcafde29d4a7b57411fabb14931867ed9b5187b5ec3e4bd9a9204dbecc56115655536ef93d1c5d38b92654e393c32ec6e30a7d838a6c3838
- TLSH
  T1A631C0346BA3D9B48F1340D8078BD18AE72E46232929BA807D4D83606F82165D6336FF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  bc-csharp-master/crypto/src/asn1/Asn1GeneralizedTime.cs
- Size 10KB
- SHA256 d6c37404e6fa0bcd51a8ff74eb0bf43fbeee347af6a498eee1774936b1fa0736
- MD5 03cd2d14ccfdebb1716685d9a79c6f27
- SHA1 97837f5992647f7e1c6fcea0195254a28d65ef0b
- SHA512 0ab8e99650f2942fc9b954f03ac563bb3c77a23988bd2626cf13104d0ef7199f063270ac61dca949787078ef48a87a8ae8941aadce645914b54a5513fad000d9
- SSDEEP 192:/Wv5YgKugqAU3EAroZ9tve5f8e1jvfbVW0x8X+l4LpDEV2eM5e3wFppvcGtcGqcl:Q5YMd97rC0hsLtLqLEJ
- TLSH
  T1072214519793D01A0A1310704F9778C2793AC6370E5CDCA4BD4ED8E86F8492B8E7B7AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  bc-csharp-master/crypto/src/asn1/Asn1InputStream.cs
- Size 16KB
- SHA256 e248a62ff193bea9f79fe45572d3966397a2fb1b228b29256d6fbe6b6ff42116
- MD5 7183a84fabb0ce79e297c0b46437c333
- SHA1 d085bf4b1a3cc81a7c88cab0df06023c88722a46
- SHA512 8339a374cbfedd90a092928504888406cb37cda22507f7b213b649948b44220dd2831f0366af9605f87224e13c94831a9ee193fc77c0b2e74847eed8a365e204
- SSDEEP 384:sX1sLWTuvo3H3iK0CjS4+RpZU9RyoXO05SSWVs7K9MaApsS:+Io3H350CjS4+RpZU9RyoXO05SSWVs7f
- TLSH
  T1AF72345028B380369E8351B85F9EE0C9F62554231728D975BC9CC460AFC55F88BF9BDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  bc-csharp-master/crypto/src/asn1/Asn1Null.cs
- Size 2KB
- SHA256 4645115eff04ca125fc458b4901a4a37c499072b55299272586b8fc808422ee9
- MD5 9eb866b8f9625a7bce0a7352c6e557f7
- SHA1 01574f57f1332f47c80364de6b73ed07294435e0
- SHA512 ccfb430dd0941ef386c731609c8ebc26e4aee814cef32a682eacf854293c64acd5d7761704794058961b44aa24719b59813aa32704ccf5157e8c962edbbf06e8
- TLSH
  T1F051D15926B3D1760FD360B486CAE5CBF2354123026859207D4C4640DFC19AA9BF6B9F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  bc-csharp-master/crypto/src/asn1/Asn1Object.cs
- Size 3KB
- SHA256 3a976886fe7703eb3609a7a0961659bbe89878c8763456d26c606d2a6c4690b6
- MD5 3a10201cec796e1cff9e0c8ca7f97973
- SHA1 65c2e95b1bef75a87947cede528241978656350b
- SHA512 b678d37e20ddc194e237d538c7c4c6477234f147278d95cb800e5be55a60245e39be5f5f8f058e77a801f0beeba51e09641ca1520d5a0e393b82a3475d679873
- TLSH
  T14871BC256BA3C6B25F5310E04B89AA88A739A1234048FC51BDDEDF504F461B4B7367AF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  bc-csharp-master/crypto/src/asn1/Asn1ObjectDescriptor.cs
- Size 5KB
- SHA256 e3095fb7fad655bf91f5714461bb6f7496a17d57ed4cf42fb2805d0737bc25bf
- MD5 37b756c2c253f6dc5e3841eabf591538
- SHA1 7fea082689140396f6920a9334a3193ca751ac5e
- SHA512 acca9d56686c9281ab7bb2108ad5f967f43778c287d291cca543a16e4d4af83ed06de27cdca58e36d86632d81e3238b20b9e04a583e555b706cbb6da0cb48405
- SSDEEP 96:JjaNSlQUVv5AY1Vnl+iJHijunzAcyb3EWeLJRiJkgV9ffeOfffY9Ug7cgB9APlIc:MZ6v5AYrnl+iojunzALb3EWeLCJJV1jT
- TLSH
  T16CB1F026AED3E8B196C380A05D5DD985D13582170569FFA879ACC8906F843B1DFF238F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19 behavioral20
- Target
  bc-csharp-master/crypto/src/asn1/Asn1OctetString.cs
- Size 4KB
- SHA256 37c1a1ad9a61c29c49aafa05fecfe7e4a4746ecf8dcaf8757551396d61ae98cc
- MD5 d43cce3710403d702b718af6b51b9bc9
- SHA1 dd9b8effec00445748ed17178ba7805643d97266
- SHA512 a92cee945a343d8903227c02ee4540c811ffd58e16d197e1d4ac2abaf7b55ed30ef3eec7cd5fc46136906b45e1928ca1eaa84fda65672b636fecca01d76ac270
- SSDEEP 96:CjT4lSlQ2YaVv5p/VRh9bDj6l6vlunvXbAc63Ejk4h6ibvknXmRbEGgn9RARnlDs:64x2YAv5p9Rh5Dj6l6vlunvXbAt3Ejk7
- TLSH
  T175A144263AA7D43686935060568EF5CBE135412331789AB0BC1CC4A4AFC12A4DBF9FDF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  bc-csharp-master/crypto/src/asn1/Asn1RelativeOid.cs
- Size 17KB
- SHA256 3217bf685e828720b46f94b6faaea307a897ee7e5ba2e6f25af75881789c027f
- MD5 7b99e1a7415dcd17a3a2f5c24934a34a
- SHA1 b289067637f6dc53200513e3e3d8535285d6d2d3
- SHA512 1982fe742b0a72d7aca2b86ec07fd99f7c15f80e784c95ed6690702106d97bd397f5c295d3ce1568047c892e220d37d293a97911e5441b8b665e52d098b59e57
- SSDEEP 192:OJwv5Y0DwSBauZFAB3EszgaoRrE64+4Kx6Bh6+lIeGRoqxD3JqKIajSqn6Kzga2/:Ok5Y9+bgXzmPQoeG6BFewJTJik
- TLSH
  T1C172CD241AE291B60B9391389BDBE047FA3581338648BC24BE4D45559FC0F249BF97DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  bc-csharp-master/crypto/src/asn1/Asn1Sequence.cs
- Size 9KB
- SHA256 7adc5c894ea6860d079671864298f43e6c108dede2846b563f5b71bde0e33d3e
- MD5 2ed061f44e7274c3689327537e12997d
- SHA1 4a9367bd9a0b2d4e22983a548d078a8a13bf6ec2
- SHA512 98aa136efd3f8478f057e7d799c3655ec26264f26bd1c1ca539f52fe05f4291ba597486e950cd04a0373acdb9eab1ba27e840608ddc488ead043b503c874f4d5
- SSDEEP 192:tNOOmDjXuyEAO3ENuIPhDp277qIuaT6g4v0/mlVaoHEkqKskymEKoB5+EKNV2l5U:tkDy7bWPJp277qIuaT6g4v0/mlVaoHEc
- TLSH
  T18912554936D3E236C9CB206907CF98CFE225812325AD99507C6C8450AFD1EB4D6B5FAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  bc-csharp-master/crypto/src/asn1/Asn1Set.cs
- Size 9KB
- SHA256 4a87df2391f46c8a2cef8298600d14518b673647293bf4bfcbeb77d3ca38a052
- MD5 225bb72218c9bd00b1febdb6a2b2d34e
- SHA1 f29b2664ab1853c1911ee28f7b21f8a792731c5b
- SHA512 97caec1dc06dc79dc4f6eef6d5731a29a29000753ba5f5ec50157585fc280ac5a71878cf6e82c0db96b964f641e19bbb1dae565134761d1e69201f40107f6a01
- SSDEEP 192:twYVhhDjbup1Av3E+jo4h3LVhleSakvmEKqUTnKUas3dTy6slkKUSCPcFqUTnKUE:txhDeb0do41LVhleSakvmEKqUTnKUasx
- TLSH
  T14612D1143DD1E1325AAB146A07CFD88FF236813B0458AD507C8C8550AFA3FA566B7B9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  bc-csharp-master/crypto/src/asn1/Asn1TaggedObject.cs
- Size 16KB
- SHA256 6827f4a20759217dc65d956716f1f70982a952c6046a4ec9a2e963d0719861c6
- MD5 2c85de8717c322cbf5350f1ceba48bc7
- SHA1 83a9f0295e6deffe847e6256273b9a361689cfcb
- SHA512 8875e82fb335fde6a59f4709a6a0bded950044fd8ecf2e402b569846f95783e89b980552e2a9dcc1e1e7ec22ce67110ffa831861f14a68f8261ec036c419ee53
- SSDEEP 192:fFf2Cughi3E+LIVz0bDUEfApGQh9qctCfbfR7Bq/c4SnspKeGbPYKeh113aL:+nCUMpRIcojh3PsplGbPYlh1Fm
- TLSH
  T1D672152427A2C1F10A9301A5CF45E486E53541D36F98FA6078BCC6D0AFC95A5CBF53AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  bc-csharp-master/crypto/src/asn1/Asn1UtcTime.cs
- Size 9KB
- SHA256 68f387d888758fa4fb48a101802d9d82559a7b89e128d3c3fc09b693d34cca07
- MD5 43bbd70ed2e4fc7472bd80392c662a29
- SHA1 50d52a06fee51a0d6d7aa8325e4424d2cbdce9a5
- SHA512 5e002b25a5d900820e2a7e4d497a4d0ab669970d5878ff8c548099982d2b596a5a61da36a34a1cb3021140ed4353ccc71e90e56202d6c9bebdf6e8a0d877b317
- SSDEEP 192:kqv5YgPjqQBuH0mA03E5u/5/Zx5tnTse5b9FIGZsGFhGj9L:H5YGaxdjTxT7pFAjp
- TLSH
  T1661244951B53C52B0F6360E09B86C182B939430B4A99EC607D6F4414EF89D2DA77D3EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32