General

  • Target
    Rivex Meccha Esp source.rar
  • Size 3.8MB
  • Sample260704-dvyp6aey2n
  • SHA256 851e4b08ce96b66d9f908afcfc72dbea70add7c2efdbc0735d9bb905078ef6c1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Rivex Meccha Esp source.rar
    • Size 3.8MB
    • SHA256 851e4b08ce96b66d9f908afcfc72dbea70add7c2efdbc0735d9bb905078ef6c1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      ChameleonESP.vcxproj.user
    • Size 168B
    • SHA256 c06a75b13f855a94d46616796e024c52b499f8f92cf00ccb571ddbc6ff574676
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      RivexMeccha.sln
    • Size 831B
    • SHA256 63941261ba25d8352f307f0547b2e149f37b410d9b412ffe93ad2088978a941a
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      RivexMeccha.vcxproj
    • Size 4KB
    • SHA256 95150c3ffc475c3cfa914e090efe58115b60c15bce95cddc1b450424e778106c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      RivexMeccha.vcxproj.user
    • Size 168B
    • SHA256 c06a75b13f855a94d46616796e024c52b499f8f92cf00ccb571ddbc6ff574676
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      imgui/imconfig.h
    • Size 12KB
    • SHA256 ec4588d910a96c6a7b7f0512c0ca7c64a29713d6ccdd9f31e617c706e0d5eee8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      imgui/imgui.cpp
    • Size 948KB
    • SHA256 a4fb4a67c6631f988454530db682fbb3d22d51529bf6b1f7681dde9df9ee56fd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      imgui/imgui.h
    • Size 419KB
    • SHA256 5eb1171248756ddc37721637bceb9a43ca803559db2ad185f97a7d1c13b79cc8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      imgui/imgui_draw.cpp
    • Size 372KB
    • SHA256 4802903eceea8dbe370827d459a0dbdd31ba749787740aee2cd4b09f737d8de3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      imgui/imgui_impl_dx11.cpp
    • Size 35KB
    • SHA256 1c0c3af25b45dceb4c45de7da591244f4935718154e7149d0e90858958c6f19d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      imgui/imgui_impl_dx11.h
    • Size 2KB
    • SHA256 fb8a314a6a2904dcc5bfeb938a169389e170f233ad367d33f1ce5c7bde586a7c
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      imgui/imgui_impl_win32.cpp
    • Size 51KB
    • SHA256 6a602ce28470bb209636c40633156e63a530acd49f137819d837d80688d52df6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      imgui/imgui_impl_win32.h
    • Size 3KB
    • SHA256 2736595b8de1e56871661d5d9b96deec567d35521746fbe2ade8f0543acdfd2b
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      imgui/imgui_internal.h
    • Size 300KB
    • SHA256 25842fe5b8bf5256ddf7bc4706178a93006d2d82259dafb7ad52f3bc87191555
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      imgui/imgui_tables.cpp
    • Size 262KB
    • SHA256 e3582f19ccc1fec17cb5a7be28eec4b7505fcaae05e9dad5cd59728f9f08d5eb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      imgui/imgui_widgets.cpp
    • Size 539KB
    • SHA256 4be81d5650550c93e01bb614def7b03c6f02b951fceb082ae1a76baa55a872a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

Score
1/10

behavioral2

adwarepersistenceransomwarespyware
Score
8/10

behavioral3

Score
3/10

behavioral4

Score
3/10

behavioral5

Score
3/10

behavioral6

adwarepersistenceransomwarespyware
Score
8/10

behavioral7

adwarediscoveryspyware
Score
3/10

behavioral8

Score
1/10

behavioral9

Score
3/10

behavioral10

Score
3/10

behavioral11

Score
3/10

behavioral12

adwarepersistenceransomwarespyware
Score
8/10

behavioral13

Score
3/10

behavioral14

Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

Score
3/10

behavioral19

Score
3/10

behavioral20

Score
3/10

behavioral21

Score
3/10

behavioral22

adwarepersistenceransomwarespyware
Score
8/10

behavioral23

Score
3/10

behavioral24

adwarepersistenceransomwarespyware
Score
8/10

behavioral25

Score
3/10

behavioral26

Score
3/10

behavioral27

Score
3/10

behavioral28

Score
3/10

behavioral29

Score
3/10

behavioral30

Score
3/10

behavioral31

Score
3/10

behavioral32

adwarepersistenceransomwarespyware
Score
8/10